medium4.0
CVE-2023-25524
NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in th…
Impact
NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit of this vulnerability may lead to information disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nvidia | Omniverse Launcher | before 1.8.11 |