VULNERABILITY INTELLIGENCE

CVE-2020-3952

CVSS score9.8 CRITICAL

EPSS probability90.38%

CISA KEVKnown exploited vulnerability

Published2020-04-10

Last modified2026-06-17

Known Exploited Vulnerability

VMware vCenter Server Information Disclosure Vulnerability

Vendor / product: VMware / vCenter Server

Description

Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.