CVE-2020-3956

🗓️ 20 May 2020 13:30:58Reported by vmwareType

cve🔗 web.nvd.nist.gov👁 213 Views🌐 WEB

VMware Cloud Director versions 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 are vulnerable to code injection leading to remote code execution

Reporter	Title	Published	Views	Family All 24
GithubExploit	Exploit for Expression Language Injection in Vmware Vcloud_Director	1 Jun 202018:26	–	githubexploit
0daydb	vBulletin 5.6.1 CVE-2020-12720 - SQL Injection	3 Jun 202015:53	–	0daydb
0daydb	vCloud Director 9.7.0.15498291 CVE-2020-3956 - Remote Code Execution	3 Jun 202015:54	–	0daydb
0daydb	VMWare vCloud Director 9.7.0.15498291 - Remote Code Execution	6 Jun 202015:10	–	0daydb
0day.today	vCloud Director 9.7.0.15498291 - Remote Code Execution Exploit	3 Jun 202000:00	–	zdt
0day.today	VMWAre vCloud Director 9.7.0.15498291 - Remote Code Execution Exploit	8 Jun 202000:00	–	zdt
ATTACKERKB	CVE-2020-3956: VMware Cloud Director Code Injection Vulnerability	20 May 202000:00	–	attackerkb
BDU FSTEC	The vulnerability of VMware vCloud Director, a platform for managing cloud storage, stems from insufficient neutralization of certain elements in requests. This allows an attacker to execute arbitrary code.	17 Jul 202000:00	–	bdu_fstec
Circl	CVE-2020-3956	2 Jun 202007:45	–	circl
CNVD	VMware Cloud Director Injection Vulnerability	21 May 202000:00	–	cnvd

NVD

Node

vmware vcloud_directorRange9.5.0.0–9.5.0.6

vmware vcloud_directorRange9.7.0.0–9.7.0.5

vmware vcloud_directorRange10.0.0.0–10.0.0.2

AND

linux linux_kernelMatch-

vmware photon_osMatch-

Node

vmware vcloud_directorRange9.1.0.0–9.1.0.4

AND

linux linux_kernelMatch-

[
  {
    "product": "VMware Cloud Director",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4."
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/157909/vCloud-Director-9.7.0.15498291-Remote-Code-Execution.html
citadelo	www.citadelo.com/en/blog/full-infrastructure-takeover-of-vmware-cloud-director-CVE-2020-3956/
github	www.github.com/aaronsvk/CVE-2020-3956
vmware	www.vmware.com/security/advisories/VMSA-2020-0010.html

Parameter	Position	Path	Description	CWE
Host	request body	/api/admin/org/{org_id}/settings/email	Expression injection via SMTP host value in email settings enabling RCE	CWE-917

21 Nov 2024 05:32Current

8.8High risk

Vulners AI Score8.8

CVSS 26.5

CVSS 3.18.8

EPSS0.211

CWE-917