CVE-2020-3954: Input Validation
Published Apr 15, 2020
·Updated
Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation.
Affected Software
1 affected component
VMware vRealize Log Insight<8.1.0
Event History
Apr 15, 2020
CVE Published
via MITRE·05:17 PM
Data Sourced
via MITRE·05:17 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-3954?
CVE-2020-3954 is an Open Redirect vulnerability that exists in VMware vRealize Log Insight prior to version 8.1.0.
2
How does CVE-2020-3954 affect VMware vRealize Log Insight?
CVE-2020-3954 affects VMware vRealize Log Insight by allowing an attacker to redirect users to malicious websites.
3
What is the severity of CVE-2020-3954?
CVE-2020-3954 has a severity rating of medium (6.1).
4
How can I fix CVE-2020-3954 in VMware vRealize Log Insight?
To fix CVE-2020-3954, update VMware vRealize Log Insight to version 8.1.0 or later.
5
Where can I find more information about CVE-2020-3954?
More information about CVE-2020-3954 can be found at the following link: https://www.vmware.com/security/advisories/VMSA-2020-0007.html.