CVE-2023-20884
VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Modified - security@vmware.com
- Published
- 2023-05-30
- Last modified
- 2025-01-10
- Weaknesses
- CWE-601
Affected products
- Cloud Foundation (Vmware)
- Identity Manager (Vmware)
- Identity Manager Connector (Vmware)
- Workspace One Access (Vmware)
References
- https://www.vmware.com/security/advisories/VMSA-2023-0011.html
