WID-SEC-W-2023-1322

DeutschShown in its original language — a full translation is planned for a future version.

VMware Produkte: Schwachstelle ermöglicht Umleitung und Offenlegung von Informationen

view advisory published 2023-05-30

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Workspace One Access, VMware Identity Manager und VMware Cloud Foundation ausnutzen, um den Benutzer umzuleiten und Informationen offenzulegen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-20884US	medium6.1	0.35% (28th)	—	2023-05-30
VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attack…

references

External citations — patches, advisories, analysis.

WID-SEC-W-2023-1322 - CSAF Versionself
WID-SEC-2023-1322 - Portal Versionself
VMware Security Advisory vom 2023-05-30external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan