CVE Database · CVE-2020-3952
CVSS v3.1
9.8
EPSS
90.38%
Published
Apr 10, 2020
Modified
Oct 30, 2025
CISA Known Exploited Vulnerability
Added: 2021-11-03 · Due: 2022-05-03
Apply updates per vendor instructions.
Public PoC / Exploit (7)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses (CWE)
Affected Products (1)
References (5)