CVEvulnerability

CVE-2023-34037

5.3 MEDIUM Published 2023-08-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-444

Description

VMware Horizon Server contains a HTTP request smuggling vulnerability. A malicious actor with network access may be able to perform HTTP smuggle requests.

Affected configurations

• vmware horizon client 2006 • vmware horizon client 2012 • vmware horizon client 2103 • vmware horizon client 2106 • vmware horizon client 2111 • vmware horizon client 2111.1 • vmware horizon client 2203 • vmware horizon client 2212

Related

Weakness · CWE (1)

  • CWE-444 Inconsistent Interpretation of HTTP Requests weakness

References