PT-2020-4882 · Vmware · Access Connector+3

Published 2020-11-23 · Updated 2025-10-30 · CVE-2020-4006

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector (affected versions not specified)

Description: The issue is related to a command injection vulnerability due to insufficient checking of arguments passed to a command. This vulnerability can be exploited by a remote attacker to execute arbitrary commands. It has been reported that Russian state-sponsored malicious cyber actors are exploiting this vulnerability to breach corporate networks.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

OS Command Injection

Weakness Enumeration

CWE-77

CWE-78

Related Identifiers

BDU:2020-05436

CVE-2020-4006

Affected Products

Access Connector

Identity Manager

Identity Manager Connector

Vmware Workspace One Access

References · 23

• https://vmware.com/security/advisories/VMSA-2020-0027.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-05436 · Security Note
• https://osv.dev/vulnerability/CVE-2020-4006 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4006 · Security Note
• https://t.me/thehackernews/926 · Telegram Post
• https://kb.cert.org/vuls/id/724367 · Note
• https://kb.vmware.com/s/article/81754 · Note
• https://t.me/sysadm_in_channel/2503 · Telegram Post
• https://t.me/cibsecurity/16761 · Telegram Post
• https://t.me/ckure/6115 · Telegram Post
• https://t.me/thehackernews/906 · Telegram Post
• https://t.me/defcon_news/63192 · Telegram Post
• https://anti-malware.ru/news/2020-11-24-114534/34325 · Note
• https://t.me/cveNotify/141047 · Telegram Post
• https://t.me/cvenotify/109882 · Telegram Post