CVE-2020-3940

CVE Database · CVE-2020-3940

· MEDIUMModified

CVSS v3.1

5.9

EPSS

0.80%

Published

Jan 17, 2020

Modified

Nov 21, 2024

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability.

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-295

Affected Products (12)

vmware · workspace_one_boxer (up to 5.13.1)vulnerable

vmware · workspace_one_content (up to 3.21)vulnerable

vmware · workspace_one_content (up to 4.20)vulnerable

vmware · workspace_one_intelligent_hub (up to 19.11.1)vulnerable

vmware · workspace_one_notebook (up to 1.2.1)vulnerable

vmware · workspace_one_people (up to 1.3.2)vulnerable

vmware · workspace_one_piv-d_manager (up to 1.4.2)vulnerable

vmware · workspace_one_sdk (up to 1.4.1)vulnerable

References (2)

Vendor Advisory

Vendor Advisory