Open Redirect Vulnerability in VMware Workspace ONE UEM Console
CVE-2023-20886
Key Information:
- Vendor
Vmware
- Vendor
- CVE Published:
- 31 October 2023
What is CVE-2023-20886?
The VMware Workspace ONE UEM console is susceptible to an open redirect vulnerability that allows malicious actors to redirect users to external malicious sites. By exploiting this flaw, attackers can capture the SAML response from a victim, enabling them to impersonate the victim user and gain unauthorized access to accounts. This poses a serious threat to user security and data integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
VMware Workspace ONE UEM Console Workspace ONE UEM 23.2.0.0
VMware Workspace ONE UEM Console Workspace ONE UEM 22.12.0.0
VMware Workspace ONE UEM Console Workspace ONE UEM 22.9.0.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved