CVE-2020-3952
VMware vCenter Server Information Disclosure Vulnerability
Published Apr 10, 2020 · updated Jun 16, 2026 · vmware vcenter server
VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services Controller (PSC) does not correctly implement access controls. Successful exploitation allows an attacker with network access to port 389 to extract sensitive information.
Timeline
Detection, updates, and resolution for this record.
Apr 10, 2020 · Catalog
Detected
VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services Controller (PSC) does not correctly implement access controls. Successful exploitation allows an attacker with network access to port 389 to extract sensitive information.
Nov 3, 2021 · CISA KEV
Known exploited
Apply updates per vendor instructions.
May 3, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services Controller (PSC) does not correctly implement access controls. Successful exploitation allows an attacker with network access to port 389 to extract sensitive information.
Required action
Apply updates per vendor instructions.
CISA due date May 3, 2022
Affected
- cpe vmware/vcenter server6.7
- vendor VMware vCenter Serverversion unspecified
Sources
- CISA KEVCVE-2020-3952
VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services Controller (PSC) does not correctly implement access controls. Successful exploitation allows an attacker with network access to port 389 to extract sensitive information.
cisa.gov - CVE.orgCVE-2020-3952
Official CVE identifier
cve.org - FIRST EPSSCVE-2020-3952
30-day exploitation probability 90.4%
first.org - Exploit Database48535
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesauxiliary_admin/ldap/vmware_vcenter_vmdir_auth_bypass
Public module reference (normal). Module source is not copied into this catalog.
rapid7.com - Metasploit Modulesauxiliary_gather/vmware_vcenter_vmdir_ldap
Public module reference (normal). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2020-3952
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.
nvd.nist.gov - Packet Storm Securityhttp://packetstormsecurity.com/files/157896/VMware-vCenter-Server-6.7-Authentication-Bypass.html
Packet Storm link already published on the finding.
packetstormsecurity.com