First published: Thu Aug 03 2023(Updated: )
NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit of this vulnerability may lead to information disclosure.
Credit: psirt@nvidia.com psirt@nvidia.com
Affected Software | Affected Version | How to fix |
---|---|---|
Nvidia Omniverse Launcher | <1.8.11 | |
Nvidia Omniverse Launcher | <1.8.11 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID of this Nvidia Omniverse workstation launcher vulnerability is CVE-2023-25524.
The severity of CVE-2023-25524 is medium with a severity value of 5.3.
The affected software for CVE-2023-25524 is Nvidia Omniverse Launcher for Windows and Linux.
CVE-2023-25524 is a vulnerability in the authentication flow of Nvidia Omniverse Workstation Launcher for Windows and Linux, where a user’s access token is displayed in the browser user's address bar, allowing an attacker to impersonate the user and access launcher resources.
This vulnerability can be exploited by using the user’s access token displayed in the browser user's address bar to impersonate the user and access launcher resources.