CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-04-10
VMware vCenter Server vmdir Authentication Bypass and Remote Code Execution Vulnerability (CVE-2020-3952)
[Affected Scope] VMware vCenter Server 6.7 deployments (specifically those upgraded from prior versions) containing an embedded or external Platform Services Controller (PSC).
[Impact] A remote, unauthenticated attacker with network access to vmdir can bypass access controls to extract sensitive directory data or gain full administrative privileges.
[Mitigation] Immediately upgrade vCenter Server to version 6.7 Update 3f or later, and restrict network access to the vmdir service.