Omnissa would like to thank Assetnote (Adam Kues, Shubham Shah, Dylan Pindur) for reporting this issue to us.

Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints.