PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2020-3952] Compromising vCenter via SAML Certificates

horizon3.ai | vulnerability | CVE-2020-3952 | #vulnerability-research | #vmware | #saml | #horizon3 | #vcenter | #cve-2020-3952
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A common attack path that Horizon3 has identified across many of its customers is abusing access to the VMware vCenter Identity Provider (IdP) certificate.
CVE
CVE-2020-3952
Published
Collected

Related coverage

vulnerability · horizon3.ai
POC CVE-2021-21972
Write the file supplied in the –file argument to the location specified in the –path argument. The file will be written in the context of the vsphere-ui user.
vulnerability · horizon3.ai
[CVE-2022-31704] VMware vRealize Log Insight VMSA-2023-0001 Technical Deep Dive
# VMware vRealize Log Insight VMSA-2023-0001 Technical Deep Dive James Horseman January 31, 2023 Attack Blogs ## Introduction The recent VMware VMSA describes four new CVEs affecting VMware...
vulnerability · horizon3.ai
[CVE-2022-31704] VMware vRealize Log Insight VMSA-2023-0001 IOCs
# VMware vRealize Log Insight VMSA-2023-0001 IOCs James Horseman January 27, 2023 Attack Blogs ## Introduction The recent VMware VMSA describes four new CVEs affecting VMware vRealize Log Insight....
vulnerability · horizon3.ai
VMware Authentication Bypass Vulnerability (CVE-2022-22972) Technical Deep Dive
Technical deep dive into VMware’s recently patched authentication bypass vulnerability allowing an attacker to login as any known local user.
vulnerability · horizon3.ai
Understanding Log4Shell: the Apache log4j2 Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046)
Understanding Log4Shell: the Apache log4j2 Remote Code Execution Vulnerability (CVE-2021-44228)…
vulnerability · horizon3.ai
[CVE-2021-41765] Multiple Vulnerabilities in ResourceSpace
Advisory for CVE-2021-41765, a critical SQL injection vulnerability leading to remote code execution, by the Horizon3 red team.
Back