Security Advisory

CVE-2023-20884

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-05-30 15:05:53
Last updated 2025-01-10 18:58:11
Assigner vmware
State PUBLISHED

Description

VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure.