CVE-2020-3994

State: Published
Severity: Not scored
Published: Oct 20, 2020
Updated: Aug 4, 2024
Reserved: Dec 30, 2019

Description

VMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack vulnerability in the vCenter Server Appliance Management Interface update function due to a lack of certificate validation. A malicious actor with network positioning between vCenter Server and an update repository may be able to perform a session hijack when the vCenter Server Appliance Management Interface is used to download vCenter updates.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
vCenter Servern/a	vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k)Affected

References

https://www.vmware.com/security/advisories/VMSA-2020-0023.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.