Skip to content
OpenAdvisories
Unscored CVE-2020-3944 EUVD-2020-25209GHSA-9468-5fg2-67xr

vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading t…

Published Feb 19, 2020 · Updated Aug 4, 2024 · Assigned by vmware

Description

vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading to authentication bypass. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to bypass Adapter authentication.

Affected products

VendorProductAffectedFixed
VMWare vRealize Operations for Horizon Adapter 6.7.x prior to 6.7.1, 6.6.x prior to 6.6.1 —

References