CVE-2020-3976

MEDIUM

VMware ESXi and vCenter Server - Partial Denial of Service in Authentication Service

Title source: llm

Description

VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

https://www.vmware.com/security/advisories/VMSA-2020-0018.html

Scores

CVSS v3 5.3

EPSS 0.0250

EPSS Percentile 85.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Details

CWE

CWE-400

Status published

Products (2)

vmware/cloud_foundation 3.0 - 3.10

vmware/esxi 6.5 (49 CPE variants)

Published Aug 21, 2020

Tracked Since Feb 18, 2026