CVE-2020-3952

VMware vCenter Server Information Disclosure Vulnerability

Vcenter Server

Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.

10. Apr 2020

Ausgewertete Quellen

• Hersteller
  https://www.vmware.com/security/advisories/VMSA-2020-0006
• Hinweis
  http://packetstormsecurity.com/files/157896/VMware-vCenter-Server-6.7-Authentication-Bypass.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3952
• CISA
  VMware vCenter Server Information Disclosure Vulnerability
• NVD
  CVE-2020-3952