medium6.1
CVE-2023-20884
VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability.
Impact
VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Identity Manager | Versions 3.3.6, 3.3.7 |
| Vmware | Workspace One Access | from 21.0.8.0 through 22.09.1.0 |
| Vmware | Cloud Foundation | All versions |
| Vmware | Identity Manager Connector | All versions |