CVE-2020-3952 - Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls

Back Back to CVE browser

CRITICAL KEV

Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls

Published Apr 10, 2020 ·Due May 3, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 90.38%

Description

Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.

Affected products

Vendor n/a Product VMware vCenter Server Default
unknown
Affected
- vCenter Server 6.7 (embedded or external PSC) prior to 6.7u3f is affected by CVE-2020-3952 if it was upgraded from a previous release line such as 6.0 or 6.5. Clean installations of vCenter Server 6.7 (embedded or external PSC) are not affected.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	VMware vCenter Server	unknown	Affected vCenter Server 6.7 (embedded or external PSC) prior to 6.7u3f is affected by CVE-2020-3952 if it was upgraded from a previous release line such as 6.0 or 6.5. Clean installations of vCenter Server 6.7 (embedded or external PSC) are not affected.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (4)

http://packetstormsecurity.com/files/157896/VMware-vCenter-Server-6.7-Authentication-Bypass.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25217
Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3952
government-resourceUS Government Resource
https://www.vmware.com/security/advisories/VMSA-2020-0006
x_refsource_MISCBroken LinkVendor Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/157896/VMware-vCenter-Server-6.7-Authentication-Bypass.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25217		Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3952		government-resourceUS Government Resource
https://www.vmware.com/security/advisories/VMSA-2020-0006		x_refsource_MISCBroken LinkVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner vmware

Published Apr 10, 2020

Updated Oct 21, 2025

Reserved Dec 30, 2019

Link CVE-2020-3952

CISA Vulnrichment

Updated Jan 29, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2020-3952

Red Hat

No data

ENISA EUVD

Assigner vmware

Published Apr 10, 2020

Updated Oct 21, 2025

Exploited since Nov 3, 2021

Link EUVD-2020-25217

GitHub

No data