Maximize your protection, eliminate business risks.
Optimize and modernize with cloud transformation.
Empower your people to work securely from anywhere.
What it takes to convince leadership that migrating to the cloud is the right move.
Let us handle IT so you can focus on growing your business.
Get multichannel 24/7/365 expert end-user support.
Stay ahead of attacks with 24/7 protection and monitoring.
Maximize uptime with with industry-leading DRaaS.
Improve efficiency, productivity and outcomes with cloud.
Ensure all mobile devices, everywhere, are secure.
Gain a competitive edge with strategic IT solutions.
This battle-tested checklist enables your team to swiftly initiate a ransomware response.
IT for businesses of all sizes, in any industry.
Empower institution growth with custom IT solutions.
Ensure your firm is always in compliance.
Improve patient care and staff morale.
Deal with pressing legal matters, not IT.
Keep up with the evolving digital landscape.
Focus on your mission by outsourcing IT.
Accelerate PE client deals and secure data.
Leverage your technology as a strategic asset.
Execute initiatives and develop IT strategies.
Get the latest industry insights and trends.
Join us at events in person and online.
Hear from clients and learn more about strategic IT.
See how Dataprise can make IT your greatest asset.
Get informative technical resources from IT experts.
Stay on stop of emerging cybersecurity threats.
Discover the key areas of DR your organization needs to address to ensure downtime is minimized.
Gain a strategic asset by bringing harmony to IT.
Ensure 24/7 support and security with dedicated teams.
Drive business forward by partnering with Dataprise.
Meet our one-of-a-kind leadership team.
Discover the recognition Dataprise has earned.
Help us help businesses with strategic IT.
Embracing different perspectives and backgrounds.
Find a Dataprise location near you.
Dataprise is committed to empowering more women to consider a career in technology.
Defense Digests
Table of content
On December 16th 2021, VMware published a known vulnerability in their Workspace ONE UEM Console that if exploited successfully, would grant a malicious actor access to sensitive data.
Workspace ONE Unified Endpoint Management (ONE UEM) is a VMware solution for over-the-air remote management of desktops, mobile, rugged, wearables, and IoT devices.
This vulnerability affects both, on-prem and SAAS versions of the product. VMware has catalogued this vulnerability as Critical (9.1/10) and encourages immediate remediation by updating the affected products to the newest version, and/or following mitigation workaround procedures outlined below (see MITIGATION).
Dataprise Defense Digest
ID: D3-2021-0016-1
Severity: 9.1 (Critical)
Published: December 17, 2021
Precise impact analysis has not been released by VMware, but depending on the deployed integration level, malicious actors may be able to gain access to credentials, emails, phone numbers, account information, files, organizational structures, etc.
Very few details have been released up until the writing of this article. However, it is known that this vulnerability can be abused without user interaction (automated attacks), allowing to fully bypass authentication on vulnerable systems, granting an unknown level of access to information contained within the system, external connectors or endpoints managed by it.
Vulnerable versions are outlined in the chart below, to check your console version: – Log in to your dashboard, click on “about” and read the version information.
Impacted Version
Fixed Version
The recommended course of action is to follow upgrade & update procedures if possible.
In case an update is not possible, VMware has outlined the following steps as a workaround:
[Resolved] CRSVC-25521 – Workspace ONE UEM – Guidance for addressing CVE-2021-22054 (87167) (vmware.com)
View all Dataprise Defense Digests here.
INSIGHTS
Subscribe to get real-time notifications when a new Dataprise Defense Digest is published.