CVE-2023-20884
First published: Tue May 30 2023(Updated: )
VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure.
Credit: security@vmware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Identity Manager | =3.3.6 | |
| VMware Identity Manager | =3.3.7 | |
| Linux Linux kernel | ||
| VMware Workspace ONE Access | >=21.0.8.0<=22.09.1.0 | |
| VMware Cloud Foundation | ||
| Vmware Identity Manager Connector | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-20884.
What is the severity of CVE-2023-20884?
The severity of CVE-2023-20884 is medium.
What is the affected software by CVE-2023-20884?
The affected software by CVE-2023-20884 is VMware Workspace ONE Access and VMware Identity Manager.
How does CVE-2023-20884 impact the affected software?
CVE-2023-20884 can allow an unauthenticated malicious actor to redirect a victim to an attacker controlled domain, leading to sensitive information disclosure.
Are there any available patches or fixes for CVE-2023-20884?
Yes, patches and fixes for CVE-2023-20884 are available. Please refer to the vendor's security advisory for more information.
- collector/nvd-latest
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/vmware
- canonical/vmware identity manager
- version/vmware identity manager/3.3.6
- version/vmware identity manager/3.3.7
- vendor/linux
- canonical/linux linux kernel
- canonical/vmware workspace one access
- version/vmware workspace one access/21.0.8.0
- version/vmware workspace one access/22.09.1.0
- canonical/vmware cloud foundation
- canonical/vmware identity manager connector
- vendor/microsoft
- canonical/microsoft windows