CVE-2023-20884 (cloud_foundation, identity_manager, identity_manager_connector, workspace_one_access)

VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure.

access actor cve disclosure domain handling identity identity manager information information disclosure insecure malicious manager may one access path sensitive information victim vmware vmware workspace vmware workspace one vmware workspace one access vulnerability workspace workspace one access