ACTIEF MISBRUIKT
CVE-2020-3952: VMware vCenter Server Information Disclosure Vulnerability
| Leverancier | VMware |
|---|---|
| Product | vCenter Server |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 3 nov 2021 |
| CISA-deadline (Amerikaanse overheid) | 3 mei 2022 |
| Zwakte (CWE) | CWE-306 |
Vereiste actie (tekst van CISA, Engels)
Apply updates per vendor instructions.
Beschrijving (NVD, Engels)
VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services Controller (PSC) does not correctly implement access controls. Successful exploitation allows an attacker with network access to port 389 to extract sensitive information.
BRONNEN
Andere lekken bij VMware
- CVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
- CVE-2025-22225: VMware ESXi Arbitrary Write Vulnerability
- CVE-2025-22224: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
- CVE-2024-38813: VMware vCenter Server Privilege Escalation Vulnerability
- CVE-2024-38812: VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.