JMX RMI Service Vulnerability in vRealize Operations for Horizon Adapter by VMware
CVE-2020-3943

9.8CRITICAL

Key Information:

Vendor
Vmware
Status
Vrealize Operations For Horizon Adapter
Vendor
CVE Published:
19 February 2020

Summary

The vRealize Operations for Horizon Adapter unveils a significant security issue tied to its improperly configured JMX RMI service. This flaw permits an unauthenticated remote attacker, possessing network access to the vRealize Operations with the Horizon Adapter enabled, to potentially execute arbitrary code. Affected versions include vRealize Operations for Horizon Adapter 6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1. Organizations utilizing these versions are advised to update promptly to mitigate risks associated with this vulnerability.

Affected Version(s)

vRealize Operations for Horizon Adapter 6.7.x prior to 6.7.1

vRealize Operations for Horizon Adapter 6.6.x prior to 6.6.1

References

https://www.vmware.com/security/advisories/VMSA-2020-0003...
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.