CVE-2020-3944

CVE-2020-3944 describes an authentication bypass vulnerability in VMware vRealize Operations for Horizon Adapter versions 6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1, affecting both Microsoft and VMware Windows environments. This flaw stems from an improper trust store configuration. It carries a high CVSS score of 8.6, indicating an unauthenticated remote attacker with network access could bypass adapter authentication, potentially leading to high confidentiality impact without requiring user interaction. While the vulnerability has a high risk score, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog.