Description
Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Omnissa | Omnissa Workspace ONE UEM | Omnissa Workspace ONE UEM version prior to 24.10.0.25, Omnissa Workspace ONE UEM version prior to 24.6.0.44, Omnissa Workspace ONE UEM version prior to 24.2.0.36 | — |
Advisories 1
- WID-SEC-2025-2594 Omnissa Workspace ONE UEM: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Nov 12, 2025