Description (CNA)
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / VMware vCenter Server | affected vCenter Server 6.7 (embedded or external PSC) prior to 6.7u3f is affected by CVE-2020-3952 if it was upgraded from a previous release line such as 6.0 or 6.5. Clean installations of vCenter Server 6.7 (embedded or external PSC) are not affected. |
CWE
No CWE identifiers supplied.
References
- https://www.vmware.com/security/advisories/VMSA-2020-0006
- http://packetstormsecurity.com/files/157896/VMware-vCenter-Server-6.7-Authentication-Bypass.html
ADP enrichment
No English description supplied.
No English description supplied.