CVE-2020-3945 - vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) contains an information disclosure vulnerability due to incorrect pairing implementation between the vRealize Operations for Horizon Adapter and Horizon View

Back Back to CVE browser

HIGH

vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) contains an information disclosure vulnerability due to incorrect pairing implementation between the vRealize Operations for Horizon Adapter and Horizon View

Published Feb 19, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.39%

Description

vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) contains an information disclosure vulnerability due to incorrect pairing implementation between the vRealize Operations for Horizon Adapter and Horizon View. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may obtain sensitive information

Affected products

Vendor VMware Product vRealize Operations for Horizon Adapter Default
n/a
- Version
  6.6.x prior to 6.6.1
  Status
  affected
  Constraints
  -
- Version
  6.7.x prior to 6.7.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

VMware

vRealize Operations for Horizon Adapter

n/a

Version	Status	Constraints
6.6.x prior to 6.6.1	affected	-
6.7.x prior to 6.7.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25210
Advisory
https://www.vmware.com/security/advisories/VMSA-2020-0003.html
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25210		Advisory
https://www.vmware.com/security/advisories/VMSA-2020-0003.html		x_refsource_CONFIRMPatchVendor Advisory