Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-20886

VMware Workspace ONE UEM console contains an open redirect vulnerability. A malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user.

Published

2023-10-31T21:15:08.440

Last Modified

2024-11-21T07:41:45.290

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-601
  • Type: Primary
    CWE-601
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application vmware workspace_one_uem < 22.3.0.48 Yes
Application vmware workspace_one_uem < 22.6.0.36 Yes
Application vmware workspace_one_uem < 22.9.0.29 Yes
Application vmware workspace_one_uem < 22.12.0.20 Yes
Application vmware workspace_one_uem < 23.2.0.10 Yes
References