PT-2023-2011 · Vmware · Vmware Workspace One Content

Publicado 2023-02-28 · Atualizado 2025-03-10 · CVE-2023-20857

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Workspace ONE Content (affected versions not specified)

Description The issue is related to a passcode bypass vulnerability in VMware Workspace ONE Content. A malicious actor with access to a user's rooted device may be able to bypass the passcode. The vulnerability is associated with weaknesses in the authentication procedure, which can be exploited to bypass the authentication process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Improper Authentication

Enumeração de Fraquezas

CWE-306

CWE-287

Identificadores relacionados

BDU:2023-01635

CVE-2023-20857

Produtos afetados

Vmware Workspace One Content

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-20857 · Nota de Segurança
• https://vmware.com/security/advisories/VMSA-2023-0006.html · Aviso do Fabricante
• https://t.me/cvenotify/114063 · Publicação no Telegram
• http://packetstormsecurity.com/files/171158/VMware-Security-Advisory-2023-0006.html · Nota
• https://t.me/cvenotify/45881 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-20857 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-01635 · Nota de Segurança
• https://cybersecurity-help.cz/vdb/SB2023022827 · Nota