Vulnerabilities CVE-2020-3952

CVE-2020-3952

Medium

Open

KEV

TLP:CLEAR

VMware vCenter Server Information Disclosure Vulnerability

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

VMware — vCenter Server — VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services Controller (PSC) does not correctly implement access controls. Successful exploitation allows an attacker with network access to port 389 to extract sensitive information.

Details

EPSS Score ⓘ: 90.38%

99.8th percentile
Confidence: 100%
CISA KEV
Date Added: Nov 3, 2021
Patch Due: May 3, 2022
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.