6.1 Medium

CVE-2023-20884 VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated…

Description

VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure.

Affected products and versions

Product	Affected versions	Fixed in
VMware Workspace ONE Access (Access), VMware Identity Manager (vIDM), VMware Cloud Foundation (Cloud Foundation)	Versions not published

Do you use VMware Workspace ONE Access (Access), VMware Identity Manager (vIDM), VMware Cloud Foundation (Cloud Foundation)?

Track this CVE Watch VMware Workspace ONE Access (Access), VMware Identity Manager (vIDM), VMware Cloud Foundation (Cloud Foundation) Check my SBOMs

www.cveye.io/en/cve/CVE-2023-20884

Timeline

Published May 30, 2023
Last modified January 10, 2025

References

www.vmware.com www.vmware.com

Track this CVE