CVE-2020-3952
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.
- Affected products
- Platform Services Controller, Vmware Vcenter, Vmware Directory Service, Vmware Vcenter Server
- Vmware Vcenter Server
- = 6.7
- CVSS 3.1
- 9.8 CRITICAL
- EPSS
- 90.4% (100th percentile)
- Weakness
- CWE-306
- NVD status
- Analyzed
- Published
- 2020-04-10
CVE-2020-3952 at NVD
23 known exploits for CVE-2020-3952
Proof-of-concept code and exploit modules indexed by Sploitus
vmware_vcenter_cve_2020_3952
vmware_vcenter_cve_2020_3952
CVE-2020-3952
vmware_vcenter_cve_2020_3952
VMware VCenter Server Vmdir Authentication Bypass
LDAP Information Disclosure
VMware vCenter Server vmdir Information Disclosure
VMware vCenter Server 6.7 CVE-2020-3952 - Authentication Bypass
QuickBox Pro 2.1.8 CVE-2020-13448 - Remote Code Execution
macOS/x64 zsh RickRolling - Shellcode
VMware vCenter Server 6.7 Authentication Bypass
VMware vCenter Server 6.7 - Authentication Bypass Exploit
VMware vCenter Server 6.7 - Authentication Bypass
Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server
Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server
Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server
Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server
Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server
Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server
Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server
Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server
VMware vCenter Server vmdir Information Disclosure
VMware vCenter Server vmdir Authentication Bypass