9.8
Critical
Exploited
CVE-2020-3952 VMware vCenter Server Information Disclosure Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Weakness
CWE-306
Description
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware vCenter Server | Versions not published |
References
- www.vmware.com www.vmware.com
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of VMware vCenter Server
The 14 CVEs of VMware vCenter Server →
CVE-2024-38813
VMware vCenter Server Privilege Escalation Vulnerability
7.5
High
CVE-2024-38812
VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
9.8
Critical
CVE-2024-37081
The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An…
7.8
High
CVE-2024-37080
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol
9.8
Critical