SB2023121281 - Security restrictions bypass in VMware Workspace ONE Launcher for Android



SB2023121281 - Security restrictions bypass in VMware Workspace ONE Launcher for Android

Published: December 12, 2023

Security Bulletin ID SB2023121281
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Physical access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Security features bypass (CVE-ID: CVE-2023-34064)

The vulnerability allows an attacker to escalate privileges on the system.

The vulnerability exists due to an error in the Edge Panel feature. An attacker with physical access to device can bypass implemented security restrictions and escalate privileges on the system.


Remediation

Install update from vendor's website.