CVE-2023-20884

VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability

Medium · published May 30, 2023

CVSS v3.1
6.1
EPSS
0%
Percentile
27.1
In the wild
Unconfirmed
What it is

VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00348 · 27.1th percentile
Published
2023-05-30T15:05Z
EPSS history
Timeline
  • 30 MAY 15:05Z
    VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability
    cvelistv5