Rewterz Threat Advisory – CVE-2023-34064 – VMware Workspace One Launcher Vulnerability

Severity

Medium

Analysis Summary

CVE-2023-34064

VMware Workspace ONE Launcher could allow a physical authenticated attacker to gain elevated privileges on the system, caused by a flaw in the Edge Panel feature. By performing specially crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges to gain access to sensitive information.

Impact

• Privileges Escalation

Indicators Of Compromise

CVE

• CVE-2023-34064

Affected Vendors

• VMware

Affected Products

• VMware Workspace ONE Launcher 22.0
• VMware Workspace ONE Launcher 23.0

Remediation

Refer to VMware Security Advisory for patch, upgrade or suggested workaround information.

VMware Security Advisory