CVE-2020-4006

VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:vmware:identity_manager:3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:identity_manager:3.3.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:identity_manager:3.3.3:*:*:*:*:*:*:*
cpe:2.3:a:vmware:identity_manager_connector:3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:identity_manager_connector:3.3.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:one_access:20.01:*:*:*:*:*:*:*
cpe:2.3:a:vmware:one_access:20.10:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:a:vmware:identity_manager_connector:3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:identity_manager_connector:3.3.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:identity_manager_connector:3.3.3:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:vmware:cloud_foundation:4.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:cloud_foundation:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:*:*:*:*:*:*:*:*

Information

Published : 2020-11-23 14:15

Updated : 2021-07-21 04:39


NVD link : CVE-2020-4006

Mitre link : CVE-2020-4006


JSON object : View

CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Advertisement

dedicated server usa

Products Affected

vmware

  • cloud_foundation
  • identity_manager_connector
  • one_access
  • identity_manager
  • vrealize_suite_lifecycle_manager

microsoft

  • windows

linux

  • linux_kernel