CVE-2020-3952
VMware vCenter Server
VMware vCenter Server Information Disclosure Vulnerability
What it is
VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services Controller (PSC) does not correctly implement access controls. Successful exploitation allows an attacker with network access to port 389 to extract sensitive information.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other VMware entries on the list
- ESXi, Workstation, and Fusion VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability CVE-2025-22226 · Mar 4, 2025
- ESXi VMware ESXi Arbitrary Write Vulnerability CVE-2025-22225 · Mar 4, 2025
- ESXi and Workstation VMware ESXi and Workstation TOCTOU Race Condition Vulnerability CVE-2025-22224 · Mar 4, 2025
- vCenter Server VMware vCenter Server Privilege Escalation Vulnerability CVE-2024-38813 · Nov 20, 2024
- vCenter Server VMware vCenter Server Heap-Based Buffer Overflow Vulnerability CVE-2024-38812 · Nov 20, 2024
- ESXi VMware ESXi Authentication Bypass Vulnerability CVE-2024-37085 · Jul 30, 2024