CVE-2023-20884: Medium severity vmware workspace one access and identity manager vulnerability
VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-20884.
What is the severity of CVE-2023-20884?
The severity of CVE-2023-20884 is medium.
What is the affected software by CVE-2023-20884?
The affected software by CVE-2023-20884 is VMware Workspace ONE Access and VMware Identity Manager.
How does CVE-2023-20884 impact the affected software?
CVE-2023-20884 can allow an unauthenticated malicious actor to redirect a victim to an attacker controlled domain, leading to sensitive information disclosure.
Are there any available patches or fixes for CVE-2023-20884?
Yes, patches and fixes for CVE-2023-20884 are available. Please refer to the vendor's security advisory for more information.