Auth bypass in Vmware Vcenter_server
CVE-2020-3952
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.
Vulnerability class: Broken Authentication
EPSS: 0.904 (99.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Vmware Vcenter_server — versions 6.7
- N/a Vmware Vcenter Server — versions vCenter Server 6.7 (embedded or external PSC) prior to 6.7u3f is affected by CVE-2020-3952 if it was upgraded from a previous release line such as 6.0 or 6.5. Clean installations of vCenter Server 6.7 (embedded or external PSC) are not affected.
Weakness classification (CWE)
CISA KEV (Known Exploited Vulnerabilities)
This CVE is on the CISA KEV catalog, added on . CISA KEV inclusion means CISA has confirmed in-the-wild exploitation; US federal agencies are required to remediate within a published due date.
BOD 22-01 due date: .
Required action: Apply updates per vendor instructions.
Public proof-of-concept exploits
References
- security@vmware.com (x_refsource_MISC, Broken Link, Vendor Advisory)
- security@vmware.com (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (US Government Resource)
Frequently asked questions
- What is CVE-2020-3952?
- CVE-2020-3952 is a critical-severity vulnerability in Vmware Vcenter_server, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2020-04-10.
- How severe is CVE-2020-3952?
- Critical severity. CVSS v3 base score is 9.8 out of 10.
- Is CVE-2020-3952 known to be exploited?
- Yes. CVE-2020-3952 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2021-11-03), indicating it is being actively exploited. 61 public proof-of-concept repositories are indexed.