{"vulnerability": "CVE-2020-4005", "sightings": [{"uuid": "31eb33f6-a522-4001-ba9c-49cd37934ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-4005", "type": "seen", "source": "https://t.me/cibsecurity/16681", "content": "\u203c CVE-2020-4005 \u203c\n\nVMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG) contains a privilege-escalation vulnerability that exists in the way certain system calls are being managed. A malicious actor with privileges within the VMX process only, may escalate their privileges on the affected system. Successful exploitation of this issue is only possible when chained with another vulnerability (e.g. CVE-2020-4004)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-20T22:43:03.000000Z"}, {"uuid": "0839d6fd-b13b-44a9-889c-08277c7334b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-4005", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/vmware-julkaisi-korjaavan-paivityksen-kriittiseen-haavoittuvuuteen", "content": "", "creation_timestamp": "2026-03-17T14:50:55.678580Z"}, {"uuid": "e0f991a7-0ac5-4902-b231-6018e53d0a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-4005", "type": "seen", "source": "https://t.me/CyberGovIL/946", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9\u05dd \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea  Com1817 | VMware\n\n\u05d7\u05d1\u05e8\u05ea VMware \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05ea\u05e8\u05e2\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05de\u05e1\u05e4\u05e8 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9\u05d4.\n\n\u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e2\u05dc\u05d5\u05dc\u05d5\u05ea \u05dc\u05d0\u05e4\u05e9\u05e8 \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05e2\u05dc \u05d4\u05e9\u05e8\u05ea \u05d4\u05de\u05d0\u05e8\u05d7 (CVE-2020-4004) \u05d5\u05d4\u05e2\u05dc\u05d0\u05ea \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea (CVE-2020-4005).\n\n\u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05de\u05d3\u05d5\u05e8\u05d2\u05d5\u05ea \u05d1\u05d3\u05d9\u05e8\u05d5\u05d2 CVSS \u05d2\u05d1\u05d5\u05d4 (9.3 \u05d5-8.8 \u05d1\u05d4\u05ea\u05d0\u05de\u05d4).", "creation_timestamp": "2020-11-23T12:28:43.000000Z"}, {"uuid": "9c507a53-9f30-4878-8447-2ed71eb2df4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-4005", "type": "seen", "source": "https://t.me/CyberSecurityIL/323", "content": "\u05de\u05e2\u05e8\u05da \u05d4\u05e1\u05d9\u05d9\u05d1\u05e8 \u05d4\u05dc\u05d0\u05d5\u05de\u05d9:\n\n\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9\u05dd \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea VMware\n\n\u05d7\u05d1\u05e8\u05ea VMware \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05ea\u05e8\u05e2\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05de\u05e1\u05e4\u05e8 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9\u05d4.\n\n\u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e2\u05dc\u05d5\u05dc\u05d5\u05ea \u05dc\u05d0\u05e4\u05e9\u05e8 \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05e2\u05dc \u05d4\u05e9\u05e8\u05ea \u05d4\u05de\u05d0\u05e8\u05d7 (CVE-2020-4004) \u05d5\u05d4\u05e2\u05dc\u05d0\u05ea \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea (CVE-2020-4005).\n\n\u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05de\u05d3\u05d5\u05e8\u05d2\u05d5\u05ea \u05d1\u05d3\u05d9\u05e8\u05d5\u05d2 CVSS \u05d2\u05d1\u05d5\u05d4 (9.3 \u05d5-8.8 \u05d1\u05d4\u05ea\u05d0\u05de\u05d4).", "creation_timestamp": "2020-11-23T13:47:23.000000Z"}, {"uuid": "197d29d9-88a9-40c1-9f7e-a2ad9863379a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-4005", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityIL/548", "content": "\u05de\u05e2\u05e8\u05da \u05d4\u05e1\u05d9\u05d9\u05d1\u05e8 \u05d4\u05dc\u05d0\u05d5\u05de\u05d9:\n\n\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9\u05dd \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea VMware\n\n\u05d7\u05d1\u05e8\u05ea VMware \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05ea\u05e8\u05e2\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05de\u05e1\u05e4\u05e8 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9\u05d4.\n\n\u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e2\u05dc\u05d5\u05dc\u05d5\u05ea \u05dc\u05d0\u05e4\u05e9\u05e8 \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05e2\u05dc \u05d4\u05e9\u05e8\u05ea \u05d4\u05de\u05d0\u05e8\u05d7 (CVE-2020-4004) \u05d5\u05d4\u05e2\u05dc\u05d0\u05ea \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea (CVE-2020-4005).\n\n\u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05de\u05d3\u05d5\u05e8\u05d2\u05d5\u05ea \u05d1\u05d3\u05d9\u05e8\u05d5\u05d2 CVSS \u05d2\u05d1\u05d5\u05d4 (9.3 \u05d5-8.8 \u05d1\u05d4\u05ea\u05d0\u05de\u05d4).", "creation_timestamp": "2020-11-23T13:47:23.000000Z"}, {"uuid": "d7eb590d-44f6-4bca-bd07-4a4308a696cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-4005", "type": "seen", "source": "MISP/d143c619-5f7a-4675-ba67-f7c2abd5cc9b", "content": "", "creation_timestamp": "2024-11-14T06:09:36.000000Z"}, {"uuid": "219897d8-d68b-4afe-a9a8-a00eb50cfd7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-4005", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/vmware-julkaisi-korjaavan-paivityksen-kriittiseen-haavoittuvuuteen", "content": "", "creation_timestamp": "2020-11-23T12:30:01.000000Z"}]}