{"metadata": {"vulnerability": "CVE-2020-3956", "count": 27, "kinds": {"milestone": 5, "sighting": 9, "kev": 0, "other": 13}}, "data": [{"timestamp": "2019-12-30T00:00:00Z", "date_only": false, "value": "2019-12-30T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-3956", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-05-20T00:00:00Z", "date_only": false, "value": "2020-05-20T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-305", "record": "CERTFR-2020-AVI-305", "field": "last_revision_date"}, {"timestamp": "2020-05-20T00:00:00Z", "date_only": false, "value": "2020-05-20T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-305", "record": "CERTFR-2020-AVI-305", "field": "initial_release_date"}, {"timestamp": "2020-05-20T00:00:00Z", "date_only": false, "value": "2020-05-20T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-305", "record": "CERTFR-2020-AVI-305", "field": "revisions.0.revision_date"}, {"timestamp": "2020-05-20T13:30:58Z", "date_only": false, "value": "2020-05-20T13:30:58.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-3956", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-05-20T14:15:00Z", "date_only": false, "value": "2020-05-20T14:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6M5G-75WX-JXGJ", "record": "GHSA-6M5G-75WX-JXGJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-05-20T14:15:00Z", "date_only": false, "value": "2020-05-20T14:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-3956", "record": "GSD-2020-3956", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-05-20T14:15:11.610Z", "date_only": false, "value": "2020-05-20T14:15:11.610", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-3956", "record": "FKIE_CVE-2020-3956", "field": "published"}, {"timestamp": "2020-05-21T00:00:00Z", "date_only": true, "value": "2020-05-21", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-34450", "record": "CNVD-2020-34450", "field": "submitTime"}, {"timestamp": "2020-06-02T07:45:47Z", "date_only": false, "value": "2020-06-02T07:45:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehackernews/717", "record": "CVE-2020-3956", "field": "creation_timestamp", "uuid": "dc625b9e-9a94-48d7-ae0e-8b10a131fdc8", "content": "{NEW} Researchers disclose details + PoC for a critical vulnerability (CVE-2020-3956) in VMware's Cloud Director platform that could let attackers compromise private clouds within an entire infrastructure and access to sensitive information.\n\nhttps://thehackernews.com/2020/06/vmware-cloud-director-exploit.html", "url": "https://t.me/thehackernews/717"}, {"timestamp": "2020-06-02T08:45:46Z", "date_only": false, "value": "2020-06-02T08:45:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/antichat/8428", "record": "CVE-2020-3956", "field": "creation_timestamp", "uuid": "a9b0c9db-64a5-44be-84d4-b28be64ef7ad", "content": "FULL INFRASTRUCTURE TAKEOVER OF VMWARE CLOUD DIRECTOR (CVE-2020-3956)\nhttps://citadelo.com/en/blog/full-infrastructure-takeover-of-vmware-cloud-director-CVE-2020-3956/", "url": "https://t.me/antichat/8428"}, {"timestamp": "2020-06-02T10:44:56Z", "date_only": false, "value": "2020-06-02T10:44:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/canyoupwnme/6469", "record": "CVE-2020-3956", "field": "creation_timestamp", "uuid": "a188f06d-cdc0-4599-a3bf-869dfbdf7395", "content": "FULL INFRASTRUCTURE TAKEOVER OF VMWARE CLOUD DIRECTOR (CVE-2020-3956)\nhttps://citadelo.com/en/blog/full-infrastructure-takeover-of-vmware-cloud-director-CVE-2020-3956/", "url": "https://t.me/canyoupwnme/6469"}, {"timestamp": "2020-06-02T16:05:02Z", "date_only": false, "value": "2020-06-02T16:05:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/SecLabNews/7741", "record": "CVE-2020-3956", "field": "creation_timestamp", "uuid": "5bf243dc-275e-4d7f-bdf6-918500136f29", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Citadelo \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2020-3956) \u0432 \u041f\u041e VMware Cloud Director. \u0415\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.    \nRCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 VMware Cloud Director \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b", "url": "https://t.me/SecLabNews/7741"}, {"timestamp": "2020-06-03T17:06:16Z", "date_only": false, "value": "2020-06-03T17:06:16.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / vmware", "record": "CVE-2020-3956", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-06-04T05:14:56Z", "date_only": false, "value": "2020-06-04T05:14:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/38298", "record": "CVE-2020-3956", "field": "creation_timestamp", "uuid": "e4c472e3-576b-4ea1-b510-48ce4ce7a9d6", "content": "Recently, a group of security researchers at Citadelo has revealed a new vulnerability in VMware Cloud Director, a leading cloud service-delivery platform that could potentially allow an attacker to access sensitive data and control private clouds within the infrastructure. The security researchers have marked the flaw as \u2018CVE-2020-3956\u2018, even they have also claimed that the [\u2026]\nThe post Critical VMware Cloud Director Bug Let Hackers Complete Take Over the Corporate Server Infrastructure (https://gbhackers.com/critical-vmware-cloud-director-bug/) appeared first on GBHackers On Security (https://gbhackers.com/).", "url": "https://t.me/information_security_channel/38298"}, {"timestamp": "2020-06-23T00:00:00Z", "date_only": true, "value": "2020-06-23", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-34450", "record": "CNVD-2020-34450", "field": "openTime"}, {"timestamp": "2021-12-13T19:07:00Z", "date_only": false, "value": "2021-12-13T19:07Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-3956", "record": "GSD-2020-3956", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T17:18:13Z", "date_only": false, "value": "2022-05-24T17:18:13Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6M5G-75WX-JXGJ", "record": "GHSA-6M5G-75WX-JXGJ", "field": "published"}, {"timestamp": "2022-05-24T17:18:13Z", "date_only": false, "value": "2022-05-24T17:18:13Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6M5G-75WX-JXGJ", "record": "GHSA-6M5G-75WX-JXGJ", "field": "modified"}, {"timestamp": "2023-12-13T01:22:09.830Z", "date_only": false, "value": "2023-12-13T01:22:09.830506Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-3956", "record": "GSD-2020-3956", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T07:52:20.437Z", "date_only": false, "value": "2024-08-04T07:52:20.437Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-3956", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T07:52:20.437Z", "date_only": false, "value": "2024-08-04T07:52:20.437Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-3956", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-10T16:09:29Z", "date_only": false, "value": "2024-09-10T16:09:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/1212", "record": "CVE-2020-3956", "field": "creation_timestamp", "uuid": "9071e902-be06-43a9-8efa-26e6fee7c486", "content": "#exploit\nCVE-2020-3956:\nVMware Cloud Director (10.0.x-10.0.0.2, 9.7.0.x-9.7.0.5, 9.5.0.x-9.5.0.6, 9.1.0.x-9.1.0.4) - Arbitrary RCE (analysis + PoC)\nhttps://citadelo.com/en/blog/full-infrastructure-takeover-of-vmware-cloud-director-CVE-2020-3956/", "url": "https://t.me/CyberSecurityTechnologies/1212"}, {"timestamp": "2026-06-17T03:19:19.730Z", "date_only": false, "value": "2026-06-17T03:19:19.730", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-3956", "record": "FKIE_CVE-2020-3956", "field": "lastModified"}, {"timestamp": "2026-07-12T22:00:17.953Z", "date_only": false, "value": "2026-07-12T22:00:17.953466Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/6702", "record": "CVE-2020-3956", "field": "creation_timestamp", "uuid": "2f323599-bead-49c4-9890-05873e357258", "url": "https://t.me/pleyades_it/6702"}, {"timestamp": "2026-07-13T00:00:41.682Z", "date_only": false, "value": "2026-07-13T00:00:41.682060Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/6702", "record": "CVE-2020-3956", "field": "creation_timestamp", "uuid": "4ea9178a-62a7-4629-9eaf-25328ddccedf", "url": "https://t.me/pleyades_it/6702"}, {"timestamp": "2026-07-14T00:00:49.402Z", "date_only": false, "value": "2026-07-14T00:00:49.402739Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/6702", "record": "CVE-2020-3956", "field": "creation_timestamp", "uuid": "e81b2c79-f5bb-4b37-81a6-556c9c411001", "url": "https://t.me/pleyades_it/6702"}]}