RCE in Linux Kernel
CVE-2020-3956
VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly handle input leading to a code injection vulnerability. An authenticated actor may be able to send malicious traffic to VMware Cloud Director which may lead to arbitrary remote code execution. This vulnerability can be exploited through the HTML5- and Flex-based UIs, the API Explorer interface and API access.
Vulnerability class: Log4Shell (CVE-2021-44228)
EPSS: 0.211 (97.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux Linux_kernel
- Vmware Photon_os
- Vmware Vcloud_director
- N/a Vmware Cloud Director — versions VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4.
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security@vmware.com (x_refsource_MISC, Vendor Advisory)
- security@vmware.com (Exploit, Third Party Advisory, x_refsource_MISC)
- security@vmware.com (Exploit, Third Party Advisory, x_refsource_MISC)
- security@vmware.com (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-3956?
- CVE-2020-3956 is a high-severity vulnerability in Linux Kernel, classified under Improper Neutralization of Special Elements used in an Expression Language Statement (Expression Language Injection). CVSS score: 8.8/10. Published 2020-05-20.
- How severe is CVE-2020-3956?
- High severity. CVSS v3 base score is 8.8 out of 10.
- Is CVE-2020-3956 known to be exploited?
- 11 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.