Critical Unpatched VMware Flaw Affects Multiple Corporates Products

🗓️ 24 Nov 2020 07:08:00Reported by The Hacker NewsType

Critical Unpatched VMware Flaw Affects Multiple Corporates Products. VMware releases temporary workarounds for a critical vulnerability, tracked as CVE-2020-4006, impacting Workspace One Access, Identity Manager, and other products

Reporter	Title	Published	Views	Family All 70
ICS	Understanding and Mitigating Russian State-Sponsored Cyber Threats to U.S. Critical Infrastructure	1 Mar 202212:00	–	ics
ATTACKERKB	CVE-2020-4006	23 Nov 202000:00	–	attackerkb
BDU FSTEC	The vulnerability of the vRealize Suite Lifecycle Manager software, a virtualization platform from VMware Cloud Foundation, and administration consoles like VMware Identity Manager and VMware Workspace One Access, arises due to insufficient validation of arguments passed to commands. This allows attackers to execute arbitrary commands.	26 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the XHCI interface of USB controllers in VMware ESXi, VMware Workstation, VMware Fusion, and the VMware Cloud Foundation virtualization platform allows a perpetrator to execute arbitrary code.	3 Dec 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VMware ESXi hypervisor and the VMware Cloud Foundation virtualization platform allows a perpetrator to execute arbitrary code.	3 Dec 202000:00	–	bdu_fstec
Circl	CVE-2020-4004	20 Nov 202022:42	–	circl
Circl	CVE-2020-4005	20 Nov 202022:43	–	circl
Circl	CVE-2020-4006	24 Nov 202000:46	–	circl
CISA KEV Catalog	Multiple VMware Products Command Injection Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA	NSA Releases Advisory on Russian State-Sponsored Malicious Cyber Actors Exploiting CVE-2020-4006	7 Dec 202000:00	–	cisa