Open Redirect Vulnerability in VMware Workspace ONE UEM Console

CVE-2023-20886

What is CVE-2023-20886?

The VMware Workspace ONE UEM console is susceptible to an open redirect vulnerability that allows malicious actors to redirect users to external malicious sites. By exploiting this flaw, attackers can capture the SAML response from a victim, enabling them to impersonate the victim user and gain unauthorized access to accounts. This poses a serious threat to user security and data integrity.

References