CVE-2020-3944: vulnerability in VMWare vRealize Operations for Horizon Adapter
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.5%
vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading to authentication bypass. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to bypass Adapter authentication.
Affected products
VMWare · vRealize Operations for Horizon AdapterRelated CVEs — VMWare vRealize Operations for Horizon Adapter
In the same product, most dangerous first.