CVE-2020-3943

published 2020-02-19

CVE-2020-3943: vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a JMX RMI service which is not securely configured. An…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a JMX RMI service which is not securely configured. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to execute arbitrary code in vRealize Operations.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
vmware	vrealize_operations	>= 6.6.0 < 6.6.1	6.6.1
vmware	vrealize_operations	>= 6.7.0 < 6.7.1	6.7.1
vmware	vrealize_operations_for_horizon_adapter	—	—
vmware	vrealize_operations_for_horizon_adapter	—	—

CWE-20