CVE-2020-3952criticalunder attackCWE-306

CVE-2020-3952: critical vulnerability in VMware vCenter Server

Published · Updated

Follow this CVE+ Monitor vCenter Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 90%
from disclosure to weapon5 days
Published on NVDApr 10
1st PoC+5d
metasploitApr 9
CISA KEV+572d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

VMware vCenter Server's vmdir component fails to properly enforce access controls, allowing unauthorized users to access or modify critical directory information under specific conditions. This is a critical flaw because vCenter is central to managing virtualized infrastructure.

Technical detail

The vmdir service in VMware vCenter Server (embedded or external PSC) improperly implements access control checks, enabling attackers to bypass authentication/authorization mechanisms and access or manipulate directory data. Exploitation requires specific environmental conditions but carries critical impact due to potential compromise of infrastructure management credentials and configuration.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · VMware vCenter Server
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.