Skip to content
OpenAdvisories
High · 8.8 CVE-2023-20886 EUVD-2023-25057GHSA-v5h3-pf54-xp87

VMware Workspace ONE UEM console contains an open redirect vulnerability. A malicious actor may be able to redirect a victim to an attacker…

Published Oct 31, 2023 · Updated Sep 12, 2024 · Assigned by vmware

Description

VMware Workspace ONE UEM console contains an open redirect vulnerability.

A malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user.

Affected products

VendorProductAffectedFixed
— VMware Workspace ONE UEM Console Workspace ONE UEM 23.2.0.0, Workspace ONE UEM 22.12.0.0, Workspace ONE UEM 22.9.0.0, Workspace ONE UEM 22.6.0.0, Workspace ONE UEM 22.3.0.0 Workspace ONE UEM 23.6.0.0

Advisories 1

References