CVE-2020-4006

CRITICALCISA KEV

Multiple VMware Products Command Injection Vulnerability

Title source: CISA
STIX 2.1 vulnerability

Record summary

CVE-2020-4006 has a selected CVSS score of 9.1 (critical). CISA lists CVE-2020-4006 in KEV.

Description

VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.

Description source: CVE List

Exploitation context

Known exploitation

CISA KEV
Listed · Nov 3, 2021 · CISA
VulnCheck KEV
Listed · Dec 3, 2020 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationActive
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 4, 2025 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Multiple Products

Browse VMware / Multiple Products
CISAVersion data not supplied

VMware Workspace One Access (Access), VMware Workspace One Access Connector (Access Connector), VMware Identity Manager (vIDM), VMware Identity Manager Connector (vIDM Connector), VMware Cloud Foundation, vRealize Suite Lifecycle Manager

CVE ListMultipleaffected

References

4