Total vulnerabilities in the database
VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure.
| Software | From | Fixed in |
|---|---|---|
| vmware / identity_manager | 3.3.6 | 3.3.6.x |
| vmware / identity_manager | 3.3.7 | 3.3.7.x |
| vmware / workspace_one_access | 21.0.8.0 | 22.09.1.0.x |
| vmware / identity_manager_connector | - | - |