high8.8
CVE-2023-20886
VMware Workspace ONE UEM console contains an open redirect vulnerability.
Impact
VMware Workspace ONE UEM console contains an open redirect vulnerability. A malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Workspace One Uem | from 22.3.0.2 before 22.3.0.48 from 22.6.0.1 before 22.6.0.36 from 22.9.0.1 before 22.9.0.29 from 22.12.0.1 before 22.12.0.20 from 23.2.0.1 before 23.2.0.10 |