Skip to content
fr Sign in
Not rated

CVE-2020-3994 VMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack vulnerability in the vCenter…

Description

VMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack vulnerability in the vCenter Server Appliance Management Interface update function due to a lack of certificate validation. A malicious actor with network positioning between vCenter Server and an update repository may be able to perform a session hijack when the vCenter Server Appliance Management Interface is used to download vCenter updates.

Affected products and versions

Product Affected versions Fixed in
vCenter Server Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of vCenter Server

The 2 CVEs of vCenter Server →
CVE-2024-37087 The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server… 5.3 Medium
Track this CVE