Skip to content
OpenAdvisories
Medium · 4.0 CVE-2023-25524 EUVD-2023-29476GHSA-37fx-2m8v-2x4j

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access toke…

Published Aug 3, 2023 · Updated Oct 9, 2024 · Assigned by nvidia

Description

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit of this vulnerability may lead to information disclosure.

Affected products

VendorProductAffectedFixed
NVIDIA Omniverse Workstation Launcher 1.8.7 and prior versions —

References