← CVE Intelligence

CVE-2023-20886

n/a / VMware Workspace ONE UEM Console PUBLISHED

Description (CNA)

VMware Workspace ONE UEM console contains an open redirect vulnerability. A malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user.

Affected (CNA)

Vendor / productVersions
n/a / VMware Workspace ONE UEM Consoleunaffected Workspace ONE UEM 23.6.0.0; affected Workspace ONE UEM 23.2.0.0; affected Workspace ONE UEM 22.12.0.0; affected Workspace ONE UEM 22.9.0.0; affected Workspace ONE UEM 22.6.0.0; affected Workspace ONE UEM 22.3.0.0

CWE

CWE-601

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.