Recorded 14 Oct 2026 at 10:19 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
VMware vCenter Server Information Disclosure Vulnerability
VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services Controller (PSC) does not correctly implement access controls. Successful exploitation allows an attacker with network access to port 389 to extract sensitive information.
What it said
- CVE
- CVE-2020-3952
- Vendor
- VMware
- Product
- vCenter Server
- CISA KEV
- Listed 3 Nov 2021
- Known ransomware use
- Not stated
- Federal remediation due
- 3 May 2022
Recorded links
Source evidence when recorded
- CISA KEV
- Complete at observationRead 14 Oct 2026 at 10:18 UTC
Coverage describes the sources at this observation. A complete read then does not establish their current position.
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.