CVE-2020-3943: vulnerability in VMWare vRealize Operations for Horizon Adapter
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 2.3%
vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a JMX RMI service which is not securely configured. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to execute arbitrary code in vRealize Operations.
Affected products
VMWare · vRealize Operations for Horizon AdapterRelated CVEs — VMWare vRealize Operations for Horizon Adapter
In the same product, most dangerous first.