What is CVE-2023-25524?

CVE-2023-25524 is a medium-severity vulnerability in Nvidia Omniverse Launcher, classified under CWE-598. CVSS score: 4.0/10. Published 2023-08-03.

How severe is CVE-2023-25524?

Medium severity. CVSS v3 base score is 4.0 out of 10.

Vulnerability in Nvidia Omniverse Launcher

CVE-2023-25524

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit of this vulnerability may lead to information disclosure.

EPSS: 0.003 (24.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.0 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Nvidia Omniverse_launcher
Nvidia Omniverse Workstation Launcher — versions 1.8.7 and prior versions

Weakness classification (CWE)

CWE-598

References

psirt@nvidia.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-25524?: CVE-2023-25524 is a medium-severity vulnerability in Nvidia Omniverse Launcher, classified under CWE-598. CVSS score: 4.0/10. Published 2023-08-03.
How severe is CVE-2023-25524?: Medium severity. CVSS v3 base score is 4.0 out of 10.