Aller au contenu
en Se connecter
Non notée

CVE-2020-3994 VMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack vulnerability in the vCenter…

Description

VMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack vulnerability in the vCenter Server Appliance Management Interface update function due to a lack of certificate validation. A malicious actor with network positioning between vCenter Server and an update repository may be able to perform a session hijack when the vCenter Server Appliance Management Interface is used to download vCenter updates.

Produits et versions touchés

Produit Versions touchées Corrigé en
vCenter Server Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de vCenter Server

Les 2 CVE de vCenter Server →
CVE-2024-37087 The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server… 5.3 Moyenne
Suivre cette CVE