imPC@ndo IT

Tracker / CVE-2020-3993

CVE-2020-3993

Medium 5.9

VMware NSX-T (3.x before 3.0.2, 2.5.x before 2.5.2.2.0) contains a security vulnerability that exists in the way it allows a KVM host to download and install packages from NSX manager. A malicious actor with MITM positioning may be able to exploit this issue to compromise the transport node.

Affected products and versions

broadcom vmware_nsx-t_data_center · 2.5.0 → 2.5.2.2.0
broadcom vmware_nsx-t_data_center · 3.0.0 → 3.0.2
vmware cloud_foundation · 3.0 → 3.10.1.1
vmware cloud_foundation · 4.0 → 4.1

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References