VMware vCenter Server Information Disclosure Vulnerability

概要

参考情報

• packetstormsecurity.com/files/157896/VMware-vCenter-Server-6.7-Authentication-Bypass.html · Exploit
• vmware.com/security/advisories/VMSA-2020-0006 · Broken Link
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2020-3952

vcenter server のその他の脆弱性

• CVE-2026-59310緊急 9.8悪用確認済み（CISA KEV）VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may explo…
• CVE-2026-59309緊急 9.8VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCe…
• CVE-2024-38813緊急 9.8悪用確認済み（CISA KEV）The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this v…
• CVE-2024-38812緊急 9.8悪用確認済み（CISA KEV）The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network acces…
• CVE-2024-37087中 5.3The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server may create a denial-o…