← Database

CVE-2023-20884

MEDIUM CVSS: 6.1 Published: 2023-05-30 Modified: 2026-06-17

Description

VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure.

Affected Platforms

Microsoft WindowsVmware Cloud FoundationVmware Workspace One AccessVmware Identity ManagerLinux Linux KernelVmware Identity Manager Connector

Weakness Type

CWE-601, CWE-601

References