CVE:CVE-2020-3940
CNNVD:CNNVD-202001-392
Vmware Vmware Workspace One是美国Vmware公司的一个用于支持跨设备应用于快速交付、管理应用程序的平台。该平台包含VMware Horizon 和 VMware Horizon Cloud，将访问控制、应用程序管理和多平台端点管理集成到一个平台中，可高效管理多个设备。
Vmware Workspace One 中存在信息泄露漏洞。该漏洞源于网络系统或产品在运行过程中存在配置等错误。未授权的攻击者可利用漏洞获取受影响组件敏感信息。以下产品及版本受到影响：Workspace ONE SDK 19.x.y版本（Android）；Workspace ONE SDK (Objective-C) 5.9.9.x版本（iOS）；Workspace ONE Boxer（Android）；Workspace ONE Content（Android和iOS）；Workspace ONE SDK Plugin for Apache Cordova；Workspace ONE Intelligent Hub（Android）；Workspace ONE Notebook（Android）；Workspace ONE People（Android）；Workspace ONE PIV-D（Android）；Workspace ONE Web（Android）；Workspace ONE SDK Plugin for Xamarin。
solution:Upgrade vmware workspace_one_boxer to a higher version than 5.13.1,and avoid the version (,5.13.1); Upgrade vmware workspace_one_content to a higher version than 3.21,4.20,and avoid the version (,3.21),(,4.20); Upgrade vmware workspace_one_intelligent_hub to a higher version than 19.11.1,and avoid the version (,19.11.1); Upgrade vmware workspace_one_notebook to a higher version than 1.2.1,and avoid the version (,1.2.1); Upgrade vmware workspace_one_people to a higher version than 1.3.2,and avoid the version (,1.3.2); Upgrade vmware workspace_one_piv-d_manager to a higher version than 1.4.2,and avoid the version (,1.4.2); Upgrade vmware workspace_one_sdk to a higher version than 1.4.1,1.5.1,19.11.1,and avoid the version (,1.4.1),(,1.5.1),[19.8.0,19.11.1); Upgrade vmware workspace_one_sdk_(objective-c) to a higher version than 5.9.9.8,and avoid the version [5.9.9.7,5.9.9.8); Upgrade vmware workspace_one_web to a higher version than 7.10.8,and avoid the version (,7.10.8)