SAML Authentication Bypass in VMware Workspace ONE Unified Endpoint Management Console

CVE-2018-6979

Summary

The VMware Workspace ONE Unified Endpoint Management Console contains a vulnerability that allows attackers to bypass SAML authentication during device enrollment. If certificate-based authentication is enabled, this could lead to unauthorized access by impersonating a legitimate SAML session. Even if certificate-based authentication is not enabled, exploitation of this flaw could result in information disclosure, highlighting the critical need for system updates and enhanced security measures in affected versions.

References