Critical Unpatched VMware Flaw Affects Multiple Corporates Products

🗓️ 24 Nov 2020 07:08:00Reported by The Hacker NewsType

VMware warns of critical vulnerability 2020 4006; command injection; workaround for port 8443 configurator.

Reporter	Title	Published	Views	Family All 41
ICS	Understanding and Mitigating Russian State-Sponsored Cyber Threats to U.S. Critical Infrastructure	1 Mar 202212:00	–	ics
ATTACKERKB	CVE-2020-4006	23 Nov 202000:00	–	attackerkb
BDU FSTEC	The vulnerability of the vRealize Suite Lifecycle Manager software, a virtualization platform from VMware Cloud Foundation, and administration consoles like VMware Identity Manager and VMware Workspace One Access, arises due to insufficient validation of arguments passed to commands. This allows attackers to execute arbitrary commands.	26 Nov 202000:00	–	bdu_fstec
Circl	CVE-2020-4006	24 Nov 202000:46	–	circl
CISA KEV Catalog	Multiple VMware Products Command Injection Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA	NSA Releases Advisory on Russian State-Sponsored Malicious Cyber Actors Exploiting CVE-2020-4006	7 Dec 202000:00	–	cisa
CISA	VMware Releases Workarounds for CVE-2020-4006	23 Nov 202000:00	–	cisa
CISA	VMware Releases Security Updates to Address CVE-2020-4006	3 Dec 202000:00	–	cisa
CISA	NSA-CISA-FBI Joint Advisory on Russian SVR Targeting U.S. and Allied Networks	15 Apr 202100:00	–	cisa
CNNVD	Vmware Workspace One Command Injection Vulnerability	23 Nov 202000:00	–	cnnvd