Lucene search

VmwareCVE-2023-34064

HistoryDec 12, 2023 - 8:15 p.m.

CVE-2023-34064

2023-12-1220:15:06

vmware

web.nvd.nist.gov

cve-2023-34064

workspace one

launcher

privilege escalation

vulnerability

edge panel

physical access

sensitive information

CVSS3

4.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

39.4%

JSON

Workspace ONE Launcher contains a Privilege Escalation Vulnerability. A malicious actor with physical access to Workspace ONE Launcher could utilize the Edge Panel feature to bypass setup to gain access to sensitive information.

Affected configurations

Nvd

Node

vmwareworkspace_one_launcherRange22.01–23.11android

VendorProductVersionCPE
vmwareworkspace_one_launcher*cpe:2.3:a:vmware:workspace_one_launcher:*:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
vmware	workspace_one_launcher	*	cpe:2.3:a:vmware:workspace_one_launcher::::::android::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "VMware Workspace ONE Launcher",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Workspace ONE Launcher 22.x, 23.x"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2023-0027.html

CVSS3

4.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

39.4%

JSON

Related for CVE-2023-34064