Enhancement: cves/2022/CVE-2022-22954.yaml by mp

cves/2022/CVE-2022-22954.yaml

@@ -1,14 +1,15 @@
 id: CVE-2022-22954
 
 info:
-  name: VMware Workspace ONE Access - Freemarker SSTI
+  name: VMware Workspace ONE Access - Server-Side Template Injection
   author: sherlocksecurity
   severity: critical
-  description: An unauthenticated attacker with network access could exploit this vulnerability by sending a specially crafted request to a vulnerable VMware Workspace ONE or Identity Manager. Successful exploitation could result in remote code execution by exploiting a server-side template injection flaw.
+  description: VMware Workspace ONE Access is susceptible to a remote code execution vulnerability due to a server-side template injection flaw. An unauthenticated attacker with network access could exploit this vulnerability by sending a specially crafted request to a vulnerable VMware Workspace ONE or Identity Manager.
   reference:
     - https://www.tenable.com/blog/vmware-patches-multiple-vulnerabilities-in-workspace-one-vmsa-2022-0011
     - https://www.vmware.com/security/advisories/VMSA-2022-0011.html
     - http://packetstormsecurity.com/files/166935/VMware-Workspace-ONE-Access-Template-Injection-Command-Execution.html
+    - 
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
@@ -32,3 +33,5 @@ requests:
       - type: status
         status:
           - 400
+
+# Enhanced by mp on 2022/05/19