VMware Workspace ONE Access and Identity Manager update addresses an Insecure Redirect Vulnerability. (CVE-2023-20884)

2023-05-3000:00:00

www.vmware.com

vmware

workspace one access

identity manager

insecure redirect

vulnerability

cve-2023-20884

6.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

JSON

3a. Insecure Redirect Vulnerability (CVE-2023-20884)

VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 6.1.

CPENameOperatorVersion
workspace one accesseq22.09.1.0
workspace one accesslt22.09.1.0
workspace one accesslt22.09.1.0
vmware identity manager (vidm)eq3.3.7
vmware identity manager (vidm)lt3.3.7
vmware cloud foundation (vidm)eqAny

Name	Operator	Version
workspace one access	eq	22.09.1.0
workspace one access	lt	22.09.1.0
workspace one access	lt	22.09.1.0
vmware identity manager (vidm)	eq	3.3.7
vmware identity manager (vidm)	lt	3.3.7
vmware cloud foundation (vidm)	eq	Any