Tracker / CVE-2020-3943
CVE-2020-3943
Critical 9.8
vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a JMX RMI service which is not securely configured. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to execute arbitrary code in vRealize Operations.
Affected products and versions
| vmware | vrealize_operations · 6.6.0 → 6.6.1 |
|---|---|
| vmware | vrealize_operations · 6.7.0 → 6.7.1 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.