Unrated severityCISA KEVNVD Advisory· Published Apr 10, 2020· Updated Oct 21, 2025
CVE-2020-3952
CVE-2020-3952
Description
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.
Affected products
1- Range: vCenter Server 6.7 (embedded or external PSC) prior to 6.7u3f is affected by CVE-2020-3952 if it was upgraded from a previous release line such as 6.0 or 6.5. Clean installations of vCenter Server 6.7 (embedded or external PSC) are not affected.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- packetstormsecurity.com/files/157896/VMware-vCenter-Server-6.7-Authentication-Bypass.htmlmitrex_refsource_MISC
- www.vmware.com/security/advisories/VMSA-2020-0006mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.