CVE-2020-3944

2020-02-1920:03:57

vmware

www.cve.org

8.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.8%

JSON

vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading to authentication bypass. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to bypass Adapter authentication.

CNA Affected

[
  {
    "product": "vRealize Operations for Horizon Adapter",
    "vendor": "VMWare",
    "versions": [
      {
        "status": "affected",
        "version": "6.7.x prior to 6.7.1"
      },
      {
        "status": "affected",
        "version": "6.6.x prior to 6.6.1"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2020-0003.html