Vulnerability Description
vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading to authentication bypass. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to bypass Adapter authentication.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vmware | Vrealize Operations | >= 6.6.0, < 6.6.1 |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- https://www.vmware.com/security/advisories/VMSA-2020-0003.htmlVendor Advisory
- https://www.vmware.com/security/advisories/VMSA-2020-0003.htmlVendor Advisory
FAQ
What is CVE-2020-3944?
CVE-2020-3944 is a vulnerability with a CVSS score of 8.6 (HIGH). vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading to authentication bypass. An unauthenticated remote attacker w...
How severe is CVE-2020-3944?
CVE-2020-3944 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-3944?
Check the references section above for vendor advisories and patch information. Affected products include: Vmware Vrealize Operations, Microsoft Windows.