← Back

CVE-2020-3940

nvd nist
Published: Jan 17, 2020Modified: Jun 17, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability.

Affected (12)

Vmware
9 products
Workspace One Boxer
Workspace One Content
Workspace One Intelligent Hub
Workspace One Notebook
Workspace One People
Workspace One Piv D Manager
Workspace One Sdk
Workspace One Sdk (objective C)
Workspace One Web
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Workspace One Boxer
version < 5.13.1
Vmware
Workspace One Content
version < 3.21
Workspace One Content
version < 4.20
Workspace One Intelligent Hub
version < 19.11.1
Workspace One Notebook
version < 1.2.1
Workspace One People
version < 1.3.2
Workspace One Piv D Manager
version < 1.4.2
Vmware
Workspace One Sdk
19.8.0 ≤ version < 19.11.1
Workspace One Sdk
version < 1.5.1
Workspace One Sdk
version < 1.4.1
Workspace One Sdk (objective C)
5.9.9.7 ≤ version < 5.9.9.8
Workspace One Web
version < 7.10.8

Related CWEs

CWE-295
Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.

References (2)

Source: security@vmware.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.