VYPR
Medium severity5.9NVD Advisory· Published Jan 17, 2020· Updated Jun 17, 2026

CVE-2020-3940

CVE-2020-3940

Description

VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability.

Affected products

14
  • cpe:2.3:a:vmware:workspace_one_boxer:*:*:*:*:*:android:*:*
    Range: <5.13.1
  • cpe:2.3:a:vmware:workspace_one_content:*:*:*:*:*:android:*:*+ 1 more
    • cpe:2.3:a:vmware:workspace_one_content:*:*:*:*:*:android:*:*range: <3.21
    • cpe:2.3:a:vmware:workspace_one_content:*:*:*:*:*:iphone_os:*:*range: <4.20
  • cpe:2.3:a:vmware:workspace_one_intelligent_hub:*:*:*:*:*:android:*:*
    Range: <19.11.1
  • cpe:2.3:a:vmware:workspace_one_notebook:*:*:*:*:*:android:*:*
    Range: <1.2.1
  • cpe:2.3:a:vmware:workspace_one_people:*:*:*:*:*:android:*:*
    Range: <1.3.2
  • cpe:2.3:a:vmware:workspace_one_piv-d_manager:*:*:*:*:*:android:*:*
    Range: <1.4.2
  • cpe:2.3:a:vmware:workspace_one_sdk:*:*:*:*:*:android:*:*+ 3 more
    • cpe:2.3:a:vmware:workspace_one_sdk:*:*:*:*:*:android:*:*range: >=19.8.0,<19.11.1
    • cpe:2.3:a:vmware:workspace_one_sdk:*:*:*:*:*:apache_cordova:*:*range: <1.5.1
    • cpe:2.3:a:vmware:workspace_one_sdk:*:*:*:*:*:xamarin:*:*range: <1.4.1
    • (no CPE)
  • cpe:2.3:a:vmware:workspace_one_sdk_\(objective-c\):*:*:*:*:iphone_os:*:*:*
    Range: >=5.9.9.7,<5.9.9.8
  • cpe:2.3:a:vmware:workspace_one_web:*:*:*:*:*:android:*:*
    Range: <7.10.8
  • Range: Workspace ONE SDK for Android prior to 19.11.1 and Workspace ONE SDK for iOS (Objective-C) prior to 5.9.9.8

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.