« Volver al listado

CVE-2023-20886

Estado: ModificadaMedia (6.1)—

VMware Workspace ONE UEM console contains an open redirect vulnerability.

A malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Vmware — Workspace ONE UEM

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-20886",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-20886",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-06T14:25:05.396568Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@vmware.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@vmware.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "VMware Workspace ONE UEM Console",
          "versions": [
            {
              "status": "unaffected",
              "version": "Workspace ONE UEM 23.6.0.0"
            },
            {
              "status": "affected",
              "version": "Workspace ONE UEM 23.2.0.0"
            },
            {
              "status": "affected",
              "version": "Workspace ONE UEM 22.12.0.0"
            },
            {
              "status": "affected",
              "version": "Workspace ONE UEM 22.9.0.0"
            },
            {
              "status": "affected",
              "version": "Workspace ONE UEM 22.6.0.0"
            },
            {
              "status": "affected",
              "version": "Workspace ONE UEM 22.3.0.0"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2023-10-31T21:15:08.440",
  "references": [
    {
      "url": "https://www.vmware.com/security/advisories/VMSA-2023-0025.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@vmware.com"
    },
    {
      "url": "https://www.vmware.com/security/advisories/VMSA-2023-0025.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@vmware.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-601"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-601"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware Workspace ONE UEM console contains an open redirect vulnerability.\n\n\nA malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user.\n\n"
    },
    {
      "lang": "es",
      "value": "La consola VMware Workspace ONE UEM contiene una vulnerabilidad de redireccionamiento abierto. Un actor malintencionado puede redirigir a una víctima hacia un atacante y recuperar su respuesta SAML para iniciar sesión como el usuario víctima."
    }
  ],
  "lastModified": "2026-06-17T05:31:06.993",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "36749A31-1864-45A1-944A-1187FC302985",
              "versionEndExcluding": "22.3.0.48",
              "versionStartIncluding": "22.3.0.2"
            },
            {
              "criteria": "cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6939CED-5A78-4308-98F5-5C7E0C96ECDA",
              "versionEndExcluding": "22.6.0.36",
              "versionStartIncluding": "22.6.0.1"
            },
            {
              "criteria": "cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0A73DA2F-EAF9-4004-B27D-69C8C88583C4",
              "versionEndExcluding": "22.9.0.29",
              "versionStartIncluding": "22.9.0.1"
            },
            {
              "criteria": "cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E4ACC19B-34E5-4E52-B0B5-213A3800AAC7",
              "versionEndExcluding": "22.12.0.20",
              "versionStartIncluding": "22.12.0.1"
            },
            {
              "criteria": "cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "01B5BE21-D245-4FBE-8A4B-325C398A1A23",
              "versionEndExcluding": "23.2.0.10",
              "versionStartIncluding": "23.2.0.1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@vmware.com"
}