CVE-2020-4006criticalunder attackCWE-78

CVE-2020-4006: critical vulnerability in VMware Workspace One Access (Access), VMware…

Published · Updated

Follow this CVE+ Monitor VMware Cloud Foundation+ Monitor Workspace ONE Access

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 9.1epss 17%
from disclosure to weapon
Published on NVDNov 23
CISA KEV+345d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

A vulnerability in VMware Workspace One Access and related components allows attackers to execute arbitrary system commands on the affected server. This can lead to complete compromise of the system and its data.

Technical detail

Command injection vulnerability (CWE-78) in VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector. An attacker can inject malicious commands through user-controlled input that is improperly sanitized before being passed to system command execution. Successful exploitation results in arbitrary code execution with the privileges of the affected service.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected products
n/a · VMware Workspace One Access (Access), VMware Workspace One Access Connector (Access Connector), VMware Identity Manager (vIDM), VMware Identity Manager Connector (vIDM Connector), VMware Cloud Foundation, vRealize Suite Lifecycle Manager