Lucene search
VMwareVMSA-2020-0027.2HistoryNov 23, 2020 - 12:00 a.m.
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address command injection vulnerability
2020-11-2300:00:00
www.vmware.com
27
3a. Command Injection Vulnerability in VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector administrative configurator (CVE-2020-4006)
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a Command Injection Vulnerability in the administrative configurator. VMware has evaluated this issue to be of ‘Important’ severity with a maximum CVSSv3 base score of 7.2.
| CPE | Name | Operator | Version |
|---|---|---|---|
| access | eq | 20.10 | |
| access | eq | 20.01 | |
| vidm | eq | 3.3.3 | |
| vidm | eq | 3.3.2 | |
| vidm | eq | 3.3.1 | |
| vidm connector | eq | 19.03.0.0 | |
| vidm connector | eq | 19.03.0.1 | |
| vidm connector | eq | 3.3.3 | |
| vidm connector | eq | 3.3.2 | |
| vidm connector | eq | 3.3.2 |
Related
cisa
cisa
NSA Releases Advisory on Russian State-Sponsored Malicious Cyber Actors Exploiting CVE-2020-4006
2020-12-07 00:00:00
VMware Releases Workarounds for CVE-2020-4006
2020-11-23 00:00:00
VMware Releases Security Updates to Address CVE-2020-4006
2020-12-03 00:00:00
cisa_kev
cisa_kev
Multiple VMware Products Command Injection Vulnerability
2021-11-03 00:00:00
threatpost
threatpost
VMware Rolls a Fix for Formerly Critical Zero-Day Bug
2020-12-04 15:31:15
Critical VMware Zero-Day Bug Allows Command Injection; Patch Pending
2020-11-23 21:46:22
NSA Warns: Patched VMware Bug Under Active Attack
2020-12-07 22:06:34
krebs
krebs
VMware Flaw a Vector in SolarWinds Breach?
2020-12-18 18:33:13
Did Someone at the Commerce Dept. Find a SolarWinds Backdoor in Aug. 2020?
2021-04-16 12:57:19
osv
osv
CVE-2020-4006
2020-11-23 22:15:12
nvd
nvd
CVE-2020-4006
2020-11-23 22:15:12
cert
cert
thn
thn
NSA Warns Russian Hacker Exploiting VMware Bug to Breach Corporate Networks
2020-12-08 05:44:00
Critical Unpatched VMware Flaw Affects Multiple Corporates Products
2020-11-24 07:08:00
FBI, CISA Uncover Tactics Employed by Russian Intelligence Hackers
2021-04-27 09:14:00
checkpoint_advisories
checkpoint_advisories
VMWare Workspace Command Injection (CVE-2020-4006)
2021-11-29 00:00:00
nessus
nessus
prion
prion
Command injection
2020-11-23 22:15:00
cve
cve
CVE-2020-4006
2020-11-23 22:15:12
attackerkb
attackerkb
CVE-2020-4006
2020-11-23 00:00:00
cvelist
cvelist
CVE-2020-4006
2020-11-23 21:22:40
srcincite
srcincite
malwarebytes
malwarebytes
Atomic research institute breached via VPN vulnerability
2021-06-21 13:53:03
qualysblog
qualysblog
ics
ics