[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiQgDCrWHc8HbmA1QZhLp6zEN1qkYyoCg3bSD_BDyrNE":3,"g5a-risk:CVE-2020-3952":128},{"success":4,"data":5,"meta":126},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":56,"references":57,"referencesCount":80,"weaknesses":81,"weaknessesCount":56,"isActivelyExploited":4,"cisaInfo":89,"otxData":27,"relatedBlogPosts":90,"seoMetadata":91,"configurations":116,"relatedVendorCves":124,"notableEvents":125},"CVE-2020-3952","What is CVE-2020-3952?","Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.","Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correc...","2020-04-10T14:15:12","2025-10-30T20:07:28.207",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":17,"Type":18,"CVSSData":37,"BaseSeverity":40,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":46,"ObtainAllPrivilege":46,"ObtainUserPrivilege":46,"ObtainOtherPrivilege":46,"UserInteractionRequired":46},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":40,"Authentication":23,"ConfidentialityImpact":41,"IntegrityImpact":41,"AvailabilityImpact":41,"BaseScore":42,"BaseSeverity":43,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,"",8.6,6.4,false,0.90384,[47,47,47,47,47,47,47],"Critical",[51],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"vmware","vcenter_server","6.7","cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*",1,[58,65,71,73,75],{"url":59,"source":60,"tags":61},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F157896\u002FVMware-vCenter-Server-6.7-Authentication-Bypass.html","Packetstormsecurity",[62,63,64],"Exploit","Third Party Advisory","VDB Entry",{"url":66,"source":67,"tags":68},"https:\u002F\u002Fwww.vmware.com\u002Fsecurity\u002Fadvisories\u002FVMSA-2020-0006","Vmware",[69,70],"Broken Link","Vendor Advisory",{"url":59,"source":60,"tags":72},[62,63,64],{"url":66,"source":67,"tags":74},[69,70],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3952","CISA",[79],"US Government Resource",5,[82],{"id":83,"name":84,"description":85,"extendedDescription":43,"status":86,"abstraction":87,"structure":88},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","Draft","Base","Simple",{"shortDescription":43,"requiredAction":43,"vulnerabilityName":43,"dateAdded":27},[],{"title":92,"metaDescription":93,"keywords":94,"canonicalUrl":95,"structuredData":96},"What is CVE-2020-3952? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-3952, a critical severity cyber security vulnerability from 2020. High exploit probability (90.4%). Under certain conditio...","CVE-2020-3952, CVE-2020-3952 vulnerability, CVE-2020-3952 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, vmware security, vcenter_server vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2020-3952",{"@context":97,"@type":98,"headline":92,"description":93,"datePublished":10,"dateModified":11,"author":99,"publisher":103,"about":107,"mainEntityOfPage":111,"articleSection":114,"keywords":115},"https:\u002F\u002Fschema.org","TechArticle",{"@type":100,"name":101,"url":102},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":100,"name":101,"url":102,"logo":104},{"@type":105,"url":106},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":108,"name":6,"description":109,"additionalType":110},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":112,"@id":113},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-3952","Cybersecurity","CVE-2020-3952, CVE-2020-3952 vulnerability, CVE-2020-3952 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[117],{"Operator":27,"Negate":27,"Nodes":118},[119],{"Operator":120,"Negate":46,"CPEMatch":121},"OR",[122],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":123,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E456F84C-A86E-4EA9-9A3E-BEEA662136E6",[],[],{"lastModified":11,"cacheTime":127,"version":38},1792258582462,{"score":129,"band":49,"action":130,"scoredAt":131},89,"Emergency patch","2026-10-16T06:48:19.330093+00:00"]