CVE-2023-34037
First published: Fri Aug 04 2023(Updated: )
VMware Horizon Server contains a HTTP request smuggling vulnerability. A malicious actor with network access may be able to perform HTTP smuggle requests.
Credit: security@vmware.com security@vmware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Vmware Horizon Client | =2006 | |
| Vmware Horizon Client | =2012 | |
| Vmware Horizon Client | =2103 | |
| Vmware Horizon Client | =2106 | |
| Vmware Horizon Client | =2111 | |
| Vmware Horizon Client | =2111.1 | |
| Vmware Horizon Client | =2203 | |
| Vmware Horizon Client | =2212 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-34037?
CVE-2023-34037 is a HTTP request smuggling vulnerability in VMware Horizon Server.
What is the severity of CVE-2023-34037?
The severity of CVE-2023-34037 is medium.
How does CVE-2023-34037 affect VMware Horizon Client?
CVE-2023-34037 affects VMware Horizon Client versions 2006, 2012, 2103, 2106, 2111, 2111.1, 2203, and 2212.
How can a malicious actor exploit CVE-2023-34037?
A malicious actor with network access can exploit CVE-2023-34037 by performing HTTP smuggle requests.
Is there a fix available for CVE-2023-34037?
Yes, VMware has released a security advisory with fixes for CVE-2023-34037. Please refer to the advisory for more details.
- collector/nvd-latest
- collector/nvd-api
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/vmware
- canonical/vmware horizon client
- version/vmware horizon client/2006
- version/vmware horizon client/2012
- version/vmware horizon client/2103
- version/vmware horizon client/2106
- version/vmware horizon client/2111
- version/vmware horizon client/2111.1
- version/vmware horizon client/2203
- version/vmware horizon client/2212