Vulnerability · Published Feb 28, 2023 · Assigned by vmware
CVE-2023-20857
Medium 6.8
In plain English
A medium-severity missing authentication in VMware Workspace ONE Content. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).
Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.9%top 39.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | VMware Workspace ONE Content | VMware Workspace ONE Content for Android prior to 23.02 |
Weakness: CWE-306 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H