Paper/Archive/CVE-2020-3952

CVE-2020-3952

VMware vCenter Server — VMware vCenter Server Information Disclosure Vulnerability

KEV · due 3 May EPSS 90%public exploit SSVC act CVSS 9.8

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 In CISA KEV+3030.0 EPSS percentile 99.8.998 × 2020.0 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.

Affected

ProductAffectedFixed inSource

VMware vCenter ServervCenter Server 6.7 (embedded or external PSC) prior to 6.7u3f is affected by CVE-2020-3952 if it was upgraded from a previous release line such as 6.0 or 6.5. Clean installations of vCenter Server 6.7 (embedded or external PSC) are not affected.–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refvmware.com/security/advisories/VMSA-2020-0006 refpacketstormsecurity.com/files/157896/VMware-vCenter-Server-6.7-Authentication-Bypass.html refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3952 kevcisa.gov/known-exploited-vulnerabilities-catalog