CVE-2020-3952

Опубликовано: 10 апр. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 6.8

EPSS Критический

Описание

Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.

Ссылки

http://packetstormsecurity.com/files/157896/VMware-vCenter-Server-6.7-Authentication-Bypass.html
Exploit
Third Party Advisory
VDB Entry
https://www.vmware.com/security/advisories/VMSA-2020-0006
Broken Link
Vendor Advisory
http://packetstormsecurity.com/files/157896/VMware-vCenter-Server-6.7-Authentication-Bypass.html
Exploit
Third Party Advisory
VDB Entry
https://www.vmware.com/security/advisories/VMSA-2020-0006
Broken Link
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3952
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*

EPSS

Процентиль: 100%

0.94355

Критический

9.8 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-306

Связанные уязвимости

GHSA-rqpw-v3g2-qccx

CVSS3: 9.8

github

больше 3 лет назад

Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.

BDU:2020-01603

CVSS3: 9.8

fstec

почти 6 лет назад

Уязвимость службы каталогов VMware Directory Service (vmdir) средства управления виртуальной инфраструктурой VMware vCenter Server, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 100%

0.94355

Критический

9.8 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-306