VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Workspace_one_boxer | Vmware | * | 5.13.1 (excluding) |
| Workspace_one_content | Vmware | * | 3.21 (excluding) |
| Workspace_one_content | Vmware | * | 4.20 (excluding) |
| Workspace_one_intelligent_hub | Vmware | * | 19.11.1 (excluding) |
| Workspace_one_notebook | Vmware | * | 1.2.1 (excluding) |
| Workspace_one_people | Vmware | * | 1.3.2 (excluding) |
| Workspace_one_piv-d_manager | Vmware | * | 1.4.2 (excluding) |
| Workspace_one_sdk | Vmware | * | 1.4.1 (excluding) |
| Workspace_one_sdk | Vmware | * | 1.5.1 (excluding) |
| Workspace_one_sdk | Vmware | 19.8.0 (including) | 19.11.1 (excluding) |
| Workspace_one_sdk_(objective-c) | Vmware | 5.9.9.7 (including) | 5.9.9.8 (excluding) |
| Workspace_one_web | Vmware | * | 7.10.8 (excluding) |