CVE-2020-3952: VMware vCenter Server Information Disclosure Vulnerability
Vulnerability summary
CVE-2020-3952 is a critical (CVSS 9.8) vulnerability in VMware vCenter Server. It is known to be exploited: CISA lists it, first on 03-11-2021. EPSS estimates a 90.38% chance of exploitation in the next 30 days, higher than 99.8% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 10-04-2020PublishedVulnerability first disclosed.
- 03-11-2021Added to CISA KEVVMware vCenter Server Information Disclosure Vulnerability
- 03-05-2022CISA remediation dueApply updates per vendor instructions.
- 21-10-2025Last modifiedVulnerability information updated.
Description
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
90.38%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
0.00 pp
From 90.38% on 20-09-2026
Known exploited
Compare KEV catalogs
CISA KEVListed- Added
- 03-11-2021
- Federal due date
- 03-05-2022
CISA required action
Apply updates per vendor instructions. nvd.nist.gov/vuln/detail/CVE-2020-3952
Public exploits
4 foundExploit Reference (packetstormsecurity.com)
Maturity: unknown
VMware vCenter Server 6.7 - Authentication Bypass
Maturity: poc
VMware vCenter Server vmdir Authentication Bypass
auxiliary/admin/ldap/vmware_vcenter_vmdir_auth_bypass
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Vmware1 product
- vcenter_serverEOL6.7
1 vendor · 1 product
References
3 links- packetstormsecurity.com/files/157896/VMware-vCenter-Server-6.7-Authentication-Bypass.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3952Government ResourceUS Government Resource