{"vulnerability": "cve-2020-3952", "sightings": [{"uuid": "52d26785-b159-4f1a-959a-06f153834921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "ebc75cc9-e170-4cb7-b658-1748c0a29d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:20.000000Z"}, {"uuid": "4d9da24a-c525-4cdc-bc73-f822d286f463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2970896", "content": "", "creation_timestamp": "2024-12-24T20:21:24.788994Z"}, {"uuid": "647d89f7-9ac8-4919-ae07-e70e34fffae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "c09f2204-6f22-4a12-b325-1cc5f6f8d5c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:29.000000Z"}, {"uuid": "4c2c0781-6a66-4379-9f12-97389659461d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:48.000000Z"}, {"uuid": "dff4e3e5-a981-413c-89f3-be8d9d9508c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3xrj3ma4s2w", "content": "", "creation_timestamp": "2025-10-24T21:02:30.915769Z"}, {"uuid": "73d7c006-9238-4a47-a537-5ac501f7f556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-3952.yaml", "content": "", "creation_timestamp": "2025-10-22T02:04:03.000000Z"}, {"uuid": "bb06c1b6-dc16-4c32-b1e9-3543db423cb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/vmware_vcenter_vmdir_ldap.rb", "content": "", "creation_timestamp": "2020-04-23T03:10:54.000000Z"}, {"uuid": "ca74250a-4e63-44e8-9f9c-97e9494051c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/ldap/vmware_vcenter_vmdir_auth_bypass.rb", "content": "", "creation_timestamp": "2020-04-23T03:10:54.000000Z"}, {"uuid": "99a7a321-803f-4017-b50b-7d888d358360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2020-3952", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0fa8f6cc-d35c-43b9-97bd-d4da356be60e", "content": "", "creation_timestamp": "2026-02-02T12:29:07.089148Z"}, {"uuid": "2e53aa4d-4bf3-4d5f-8365-af0f0d314009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "published-proof-of-concept", "source": "https://t.me/cybershit/725", "content": "\u0420\u0435\u0431\u044f\u0442\u0430 \u0438\u0437 Guardicore \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0447\u0435\u0442\u0432\u0435\u0440\u0433\u0430 (CVE-2020-3952) \u0432 VMware vCenter 6.7, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a vCenter \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0435\u043b\u0438\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f VMware. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u043e\u0438\u0442\u0441\u044f \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 VMware Directory Service (vmdir). \n\n\u0412 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0435 \u043e\u043f\u0438\u0441\u0430\u043d \u043f\u043e\u043b\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2020-3952, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d \u0441\u0432\u0435\u0436\u0435\u043d\u044c\u043a\u0438\u0439 POC.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b vCenter Server 6.7, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0441 6.0 \u0438\u043b\u0438 6.5. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0441 \u043d\u0443\u043b\u044f 6.7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d.\n\n> https://www.guardicore.com/2020/04/pwning-vmware-vcenter-cve-2020-3952/\n> https://www.vmware.com/security/advisories/VMSA-2020-0006.html", "creation_timestamp": "2020-04-16T12:54:03.000000Z"}, {"uuid": "3c11d3ee-00f9-42ae-839d-678689aed4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "https://t.me/arpsyndicate/192", "content": "#ExploitObserverAlert\n\nCVE-2020-3952\n\nDESCRIPTION: Exploit Observer has 48 entries related to CVE-2020-3952. Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.\n\nFIRST-EPSS: 0.640320000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-17T03:48:58.000000Z"}, {"uuid": "3ab22ada-91e6-4159-9d3e-1839784be3bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "published-proof-of-concept", "source": "https://t.me/techpwnews/434", "content": "What's a 10? Pwning vCenter with CVE-2020-3952\n\nContinue reading at guardicore.com (from /r/netsec)", "creation_timestamp": "2020-04-16T09:08:53.000000Z"}, {"uuid": "bc4f1b85-8d12-47ce-b79b-16868e96d407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "https://t.me/information_security_channel/36785", "content": "VMware patches a critical security vulnerability that allows malicious attackers to obtain sensitive information. The vulnerability can be tracked as CVE-2020-3952, it is rated as critical and receives a CVSSv3 score of 10. VMware vCenter Server Vulnerability The vulnerability resides in the VMware Directory Service (vmdir) which is a part of vCenter Server version 6.7 [\u2026]\nThe post Critical VMware Flaw Let Attackers to Hack VMware vCenter Server (https://gbhackers.com/vmware-vcenter-server-vulnerability/) appeared first on GBHackers On Security (https://gbhackers.com/).", "creation_timestamp": "2020-04-12T06:01:42.000000Z"}, {"uuid": "aa9dcfa0-967d-4ba2-b8dc-21c2903eb68e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "published-proof-of-concept", "source": "https://t.me/canyoupwnme/6388", "content": "WHAT\u2019S A 10? PWNING VCENTER WITH CVE-2020-3952\nhttps://www.guardicore.com/2020/04/pwning-vmware-vcenter-cve-2020-3952/", "creation_timestamp": "2020-04-16T14:45:23.000000Z"}, {"uuid": "2b8be0f9-cf63-4ab9-be14-5be57a2ab8ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "https://t.me/SecLabNews/7342", "content": "\u0412 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 VMware Directory Service (vmdir) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-3952), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u043c\u0443 \u0432\u0441\u0435\u0439 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.      \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 VMware \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438", "creation_timestamp": "2020-04-13T15:30:02.000000Z"}, {"uuid": "50fbc0af-2f43-4b40-ae74-edc7b0b9ef55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/940", "content": "#exploit \nCVE-2020-3952: \nSensitive Information Disclosure in VMware vCenter Server 6.7 w/embedded or external Platform Services Controller (PSC)\nhttps://kb.vmware.com/s/article/78543\nhttps://www.vmware.com/security/advisories/VMSA-2020-0006.html", "creation_timestamp": "2024-01-20T22:06:47.000000Z"}, {"uuid": "a43f45f5-6c12-4f76-9c08-15b480c68a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/976", "content": "#exploit\n1. CVE-2020-3243,\nCVE-2020-3247:\nAuthentication Bypass -\nSymlinking Your Way to Unauthenticated Access Against Cisco UCS Director\nhttps://srcincite.io/blog/2020/04/17/strike-three-symlinking-your-way-to-unauthenticated-access-against-cisco-ucs-director.html\n]->  PoC1,  PoC2\n\n2. CVE-2020-3952:\nVMware vCenter (6.7) Server updates address sensitive information disclosure vulnerability\nhttps://github.com/guardicore/vmware_vcenter_cve_2020_3952", "creation_timestamp": "2024-10-21T17:14:39.000000Z"}, {"uuid": "2850eb59-3f62-46cf-832e-4e36524290f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "Telegram/1Zvpxkdgpqf1ia7Iew1vRtaE783wwV7WKK7OxyGOIXEZB0U", "content": "", "creation_timestamp": "2026-07-31T12:00:03.995746Z"}, {"uuid": "ed2457ec-9094-4e90-8c73-22a2e85fcc6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "published-proof-of-concept", "source": "Telegram/1Zvpxkdgpqf1ia7Iew1vRtaE783wwV7WKK7OxyGOIXEZB0U", "content": "", "creation_timestamp": "2026-08-01T00:00:31.899920Z"}, {"uuid": "b1800556-1262-4776-93e5-b88edd69d2f3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a029c06d-1fa9-40fc-bf8c-10ccacc64b0a", "content": "", "creation_timestamp": "2026-06-19T12:47:52.813872Z"}, {"uuid": "af094340-2029-4e9e-a846-3d1171a5a866", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d8ba46fa-f43f-4d61-9944-915fa074f148", "content": "", "creation_timestamp": "2026-06-23T14:04:27.256624Z"}, {"uuid": "766c4a87-d998-4773-b9d0-1e8480e03fc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "https://t.me/informationsec/2857", "content": "#\u062e\u0628\u0631 #\u0647\u0634\u062f\u0627\u0631\n\n\n\u203c\ufe0f \u0631\u0641\u0639 #\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062d\u06cc\u0627\u062a\u06cc \u0648 \u0628\u0633\u06cc\u0627\u0631 \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 #VMware #vCenter\n\n\ud83d\udd37 VMware issues 10.0 CVSS rating on vCenter Server #vulnerability\n\n\n\ud83d\udccc \u0628\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0631\u062a\u0628\u0647 \u0628\u0646\u062f\u06cc CVSS \u06cc\u0627 Common Vulnerability Scoring System\u060c  \u0628\u0627\u0644\u0627\u062a\u0631\u06cc\u0646 \u0627\u0645\u062a\u06cc\u0627\u0632 \u0645\u0645\u06a9\u0646( 10.0 \u0627\u0632 10.0 ) \u062a\u0639\u0644\u0642 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0646\u0634\u0627\u0646 \u0645\u06cc \u062f\u0647\u062f \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u060c  \u062f\u0627\u0631\u0627\u06cc \u0628\u0627\u0644\u0627\u062a\u0631\u06cc\u0646 \u0634\u062f\u062a \u0645\u0645\u06a9\u0646 \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0633\u0647\u0648\u0644\u062a \u0628\u0627\u0644\u0627\u06cc \u0633\u0648\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646 \u0627\u0633\u062a.\n@informationsec\n\n\ud83d\udd38 \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc vCenter Server 6.7 \u0642\u0628\u0644 \u0627\u0632 6.7u3f \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc CVE-2020-3952 \u0627\u0633\u062a.\n\n\ud83d\udd39\u0634\u0627\u06cc\u0627\u0646 \u0630\u06a9\u0631 \u0627\u0633\u062a \u0627\u06af\u0631 vCenter   \u0627\u0632 \u0646\u0633\u062e\u0647 \u0642\u0628\u0644\u06cc \u0645\u0627\u0646\u0646\u062f 6.0 \u06cc\u0627 6.5  \u0628\u0647 6.7 \u0628\u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0634\u062f\u0647 \u0628\u0627\u0634\u062f\u060c  \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0627\u0633\u062a.\n\n\ud83d\udd38\u062f\u0631 \u0635\u0648\u0631\u062a\u06cc \u06a9\u0647  vCenter Server 6.7 \u0631\u0627 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627 \u0646\u0635\u0628 \u06a9\u0631\u062f\u0647 \u0628\u0627\u0634\u06cc\u062f\u060c \u0686\u0646\u062f\u0627\u0646 \u062c\u0627\u06cc \u0646\u06af\u0631\u0627\u0646\u06cc \u0646\u06cc\u0633\u062a.\n\n\n@informationsec\n\ud83d\udc48\u062c\u0632\u06cc\u06cc\u0627\u062a \u0628\u06cc\u0634\u062a\u0631 \u0631\u0627 \u062f\u0631 \u0645\u0646\u0628\u0639 \u0627\u0635\u0644\u06cc \u0645\u0637\u0627\u0644\u0639\u0647 \u0641\u0631\u0645\u0627\u06cc\u06cc\u062f.\n\n\n\u0645\u0646\u0628\u0639\nhttps://www.scmagazine.com/home/security-news/vulnerabilities/vmware-issues-10-0-cvss-rating-on-vcenter-server-vulnerability/\nhttps://kb.vmware.com/s/article/78543", "creation_timestamp": "2026-08-22T14:00:15.915358Z"}, {"uuid": "1003c2d4-68b2-4379-a11d-9baac4005dff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "https://t.me/informationsec/2857", "content": "#\u062e\u0628\u0631 #\u0647\u0634\u062f\u0627\u0631\n\n\n\u203c\ufe0f \u0631\u0641\u0639 #\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062d\u06cc\u0627\u062a\u06cc \u0648 \u0628\u0633\u06cc\u0627\u0631 \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 #VMware #vCenter\n\n\ud83d\udd37 VMware issues 10.0 CVSS rating on vCenter Server #vulnerability\n\n\n\ud83d\udccc \u0628\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0631\u062a\u0628\u0647 \u0628\u0646\u062f\u06cc CVSS \u06cc\u0627 Common Vulnerability Scoring System\u060c  \u0628\u0627\u0644\u0627\u062a\u0631\u06cc\u0646 \u0627\u0645\u062a\u06cc\u0627\u0632 \u0645\u0645\u06a9\u0646( 10.0 \u0627\u0632 10.0 ) \u062a\u0639\u0644\u0642 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0646\u0634\u0627\u0646 \u0645\u06cc \u062f\u0647\u062f \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u060c  \u062f\u0627\u0631\u0627\u06cc \u0628\u0627\u0644\u0627\u062a\u0631\u06cc\u0646 \u0634\u062f\u062a \u0645\u0645\u06a9\u0646 \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0633\u0647\u0648\u0644\u062a \u0628\u0627\u0644\u0627\u06cc \u0633\u0648\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646 \u0627\u0633\u062a.\n@informationsec\n\n\ud83d\udd38 \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc vCenter Server 6.7 \u0642\u0628\u0644 \u0627\u0632 6.7u3f \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc CVE-2020-3952 \u0627\u0633\u062a.\n\n\ud83d\udd39\u0634\u0627\u06cc\u0627\u0646 \u0630\u06a9\u0631 \u0627\u0633\u062a \u0627\u06af\u0631 vCenter   \u0627\u0632 \u0646\u0633\u062e\u0647 \u0642\u0628\u0644\u06cc \u0645\u0627\u0646\u0646\u062f 6.0 \u06cc\u0627 6.5  \u0628\u0647 6.7 \u0628\u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0634\u062f\u0647 \u0628\u0627\u0634\u062f\u060c  \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0627\u0633\u062a.\n\n\ud83d\udd38\u062f\u0631 \u0635\u0648\u0631\u062a\u06cc \u06a9\u0647  vCenter Server 6.7 \u0631\u0627 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627 \u0646\u0635\u0628 \u06a9\u0631\u062f\u0647 \u0628\u0627\u0634\u06cc\u062f\u060c \u0686\u0646\u062f\u0627\u0646 \u062c\u0627\u06cc \u0646\u06af\u0631\u0627\u0646\u06cc \u0646\u06cc\u0633\u062a.\n\n\n@informationsec\n\ud83d\udc48\u062c\u0632\u06cc\u06cc\u0627\u062a \u0628\u06cc\u0634\u062a\u0631 \u0631\u0627 \u062f\u0631 \u0645\u0646\u0628\u0639 \u0627\u0635\u0644\u06cc \u0645\u0637\u0627\u0644\u0639\u0647 \u0641\u0631\u0645\u0627\u06cc\u06cc\u062f.\n\n\n\u0645\u0646\u0628\u0639\nhttps://www.scmagazine.com/home/security-news/vulnerabilities/vmware-issues-10-0-cvss-rating-on-vcenter-server-vulnerability/\nhttps://kb.vmware.com/s/article/78543", "creation_timestamp": "2026-08-23T00:00:37.604841Z"}, {"uuid": "c8c78321-9f50-4147-875a-8165feae80e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/ldap/vmware_vcenter_vmdir_auth_bypass.rb", "content": "{\"actions\": [{\"description\": \"Add an admin user\", \"name\": \"Add\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"Hynek Petrak\", \"JJ Lehmann\", \"Ofri Ziv\", \"wvu \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module bypasses LDAP authentication in VMware vCenter Server's\\n          vmdir service to add an arbitrary administrator user. Version 6.7\\n          prior to the 6.7U3f update is vulnerable, only if upgraded from a\\n          previous release line, such as 6.0 or 6.5.\\n          Note that it is also possible to provide a bind username and password\\n          to authenticate if the target is not vulnerable. It will add an\\n          arbitrary administrator user the same way.\", \"disclosure_date\": \"2020-04-09\", \"fullname\": \"auxiliary/admin/ldap/vmware_vcenter_vmdir_auth_bypass\", \"is_install_path\": true, \"mod_time\": \"2025-05-28 09:23:36 +0000\", \"name\": \"VMware vCenter Server vmdir Authentication Bypass\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\"], \"Stability\": [\"service-resource-loss\"]}, \"path\": \"/modules/auxiliary/admin/ldap/vmware_vcenter_vmdir_auth_bypass.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"admin/ldap/vmware_vcenter_vmdir_auth_bypass\", \"references\": [\"CVE-2020-3952\", \"URL-https://www.guardicore.com/2020/04/pwning-vmware-vcenter-cve-2020-3952/\", \"URL-https://www.vmware.com/security/advisories/VMSA-2020-0006.html\", \"URL-https://github.com/HynekPetrak/HynekPetrak/blob/master/take_over_vcenter_670.md\"], \"rport\": 636, \"session_types\": [\"ldap\"], \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:52.441829Z"}, {"uuid": "240818b2-aa10-415f-a580-0c5ef959798f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3952", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/vmware_vcenter_vmdir_ldap.rb", "content": "{\"actions\": [{\"description\": \"Dump all LDAP data\", \"name\": \"Dump\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"Hynek Petrak\", \"wvu \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module uses an anonymous-bind LDAP connection to dump data from\\n          the vmdir service in VMware vCenter Server version 6.7 prior to the\\n          6.7U3f update, only if upgraded from a previous release line, such as\\n          6.0 or 6.5.\\n          If the bind username and password are provided (BIND_DN and LDAPPassword\\n          options), these credentials will be used instead of attempting an\\n          anonymous bind.\", \"disclosure_date\": \"2020-04-09\", \"fullname\": \"auxiliary/gather/vmware_vcenter_vmdir_ldap\", \"is_install_path\": true, \"mod_time\": \"2026-06-04 23:51:23 +0000\", \"name\": \"VMware vCenter Server vmdir Information Disclosure\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/gather/vmware_vcenter_vmdir_ldap.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/vmware_vcenter_vmdir_ldap\", \"references\": [\"CVE-2020-3952\", \"URL-https://www.vmware.com/security/advisories/VMSA-2020-0006.html\", \"ATT&CK-T1003\"], \"rport\": 636, \"session_types\": [\"ldap\"], \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:23.168858Z"}]}