CVE-2023-20886 (published 2023-10-31T20:44:50.773Z)
VMware Workspace ONE UEM console contains an open redirect vulnerability.


A malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user.


Affected products: Vendor: n/a
Product: VMware Workspace ONE UEM Console
Versions: Workspace ONE UEM 23.6.0.0, Workspace ONE UEM 23.2.0.0, Workspace ONE UEM 22.12.0.0, Workspace ONE UEM 22.9.0.0, Workspace ONE UEM 22.6.0.0, Workspace ONE UEM 22.3.0.0