---
id: 10258
title: "[CVE-2020-3952] Compromising vCenter via SAML Certificates"
cve: CVE-2020-3952
source_domain: horizon3.ai
source_url: "https://horizon3.ai/attack-research/attack-blogs/compromising-vcenter-via-saml-certificates/"
published_at: "2021-10-04T17:20:54Z"
tags: ["vulnerability-research", "vmware", "saml", "horizon3", "vcenter", "cve-2020-3952"]
phying_url: "https://phying.com/item/10258"
lang: en
---

# [CVE-2020-3952] Compromising vCenter via SAML Certificates

## Summary

A common attack path that Horizon3 has identified across many of its customers is abusing access to the VMware vCenter Identity Provider (IdP) certificate.

## Intelligence Metadata

- **Sources:** horizon3.ai
- **CVE:** CVE-2020-3952
- **Published:** 2021-10-04T17:20:54Z
- **Original:** https://horizon3.ai/attack-research/attack-blogs/compromising-vcenter-via-saml-certificates/
- **Phying News:** https://phying.com/item/10258