CVE-2020-3956

PoC ×3—

CVSS 3.1

8.8 high

EPSS

21%p97

Published

May 20, 2020 (May 20, 2020)

Modified

Jun 17, 2026

Description

VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly handle input leading to a code injection vulnerability. An authenticated actor may be able to send malicious traffic to VMware Cloud Director which may lead to arbitrary remote code execution. This vulnerability can be exploited through the HTML5- and Flex-based UIs, the API Explorer interface and API access.

Vendors: vmware
Products: vcloud director
Weakness: CWE-917
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (21.1%)

In the news6 stories

A high-severity flaw affects VMware Workstation, Fusion and vSphere

Security AffairsJun 10, 23:41 UTC · Jun 10, 2020Vulnerability CVE-2020-3960 CVE-2020-3961 CVE-2020-3956

60

Week in review: Zoom end-to-end encryption, 5G adoption and security, Patch Tuesday forecast

Help Net SecurityJun 7, 00:00 UTC · Jun 7, 2020Vulnerability CVE-2020-3956

60

Critical flaw in VMware Cloud Director allows hackers to take over company infrastructure

Security AffairsJun 2, 09:02 UTC · Jun 2, 2020Exploit / PoC CVE-2020-3956

60

Critical VMware Cloud Director Flaw Lets Hackers Take Over Corporate Servers

The Hacker NewsJun 2, 05:37 UTC · Jun 2, 2020Exploit / PoC CVE-2020-3956

60

VMware Cloud Director vulnerability enables a full cloud infrastructure takeover

Help Net SecurityJun 2, 00:00 UTC · Jun 2, 2020Vulnerability CVE-2020-3956

60

VMware fixes CVE-2020

Security AffairsMay 20, 22:17 UTC · May 20, 2020Vulnerability CVE-2020-3956 CVE-2020-3952

60