Open Redirect Vulnerability in VMware Workspace ONE UEM Console
CVE-2023-20886
8.8HIGH
Key Information:
- Vendor
Vmware
- Vendor
- CVE Published:
- 31 October 2023
What is CVE-2023-20886?
The VMware Workspace ONE UEM console is susceptible to an open redirect vulnerability that allows malicious actors to redirect users to external malicious sites. By exploiting this flaw, attackers can capture the SAML response from a victim, enabling them to impersonate the victim user and gain unauthorized access to accounts. This poses a serious threat to user security and data integrity.
Affected Version(s)
VMware Workspace ONE UEM Console Workspace ONE UEM 23.2.0.0
VMware Workspace ONE UEM Console Workspace ONE UEM 22.12.0.0
VMware Workspace ONE UEM Console Workspace ONE UEM 22.9.0.0