PT-2023-2011 · Vmware · Vmware Workspace One Content

Published 2023-02-28 · Updated 2025-03-10 · CVE-2023-20857

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Workspace ONE Content (affected versions not specified)

Description The issue is related to a passcode bypass vulnerability in VMware Workspace ONE Content. A malicious actor with access to a user's rooted device may be able to bypass the passcode. The vulnerability is associated with weaknesses in the authentication procedure, which can be exploited to bypass the authentication process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Improper Authentication

Weakness Enumeration

CWE-306

CWE-287

Related Identifiers

BDU:2023-01635

CVE-2023-20857

Affected Products

Vmware Workspace One Content

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-20857 · Security Note
• https://vmware.com/security/advisories/VMSA-2023-0006.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-20857 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01635 · Security Note
• https://t.me/cvenotify/114063 · Telegram Post
• http://packetstormsecurity.com/files/171158/VMware-Security-Advisory-2023-0006.html · Note
• https://t.me/cvenotify/45881 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2023022827 · Note