The National Security Agency warns that Russian state-sponsored threat actors are exploiting an important VMware vulnerability in the wild. Background On December 7, the National Security Agency (NSA) published a cybersecurity advisory regarding in-the-wild exploitation, by Russian state-sponsored threat actors, of a vulnerability in several VMware products.

CVE-2020-4006: VMware Command Injection Flaw Exploited by Russian State-Sponsored Threat Actors

VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.

The VMware Workspace One Access (formerly VMware Identity Manager) application running on the remote host is affected by a unspecified command injection vulnerability.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version.

Detections

Analytics

CVE-2020-4006

critical

Tenable Plugins

critical