Live › vulnerability › CVE-2020-4006
Go to dashboardCommand injection in the administrative configurator (port 8443) of VMware Workspace One Access, Identity Manager and their connectors, plus Cloud Foundation and vRealize Suite Lifecycle Manager when they deploy vIDM. An attacker with network access to 8443 and the configurator admin password can run commands as root on the OS. Reported by the NSA. VMware rates it Important (CVSS 7.2) because the password is needed, but CISA lists it as exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 0h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| VMware Multiple Products | vendor | – | – |
| VMware Workspace One Access | vendor | 20.01, 20.10 (Linux) | KB81754 |
| VMware Identity Manager | vendor | 3.3.1, 3.3.2, 3.3.3 (Linux) | KB81754 |
| VMware Identity Manager Connector | vendor | 19.03.0.0, 19.03.0.1, 3.3.1, 3.3.2, 3.3.3 | KB81754 |
3.3.1, 3.3.2 or 3.3.3 (Linux); vIDM Connector 19.03.0.0, 19.03.0.1, 3.3.1, 3.3.2 or 3.3.3 (Linux or Windows)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability. An attacker with network access to the administrative configurator on port 8443 and a valid password for the configurator administrator account can execute commands with unrestricted privileges on the underlying operating system.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2020-4006")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.