Blog

Privasec is now a Sekuro Company

All

Compliance & Standards

Cybersecurity Basics

Event & News

Incident Response & Tabletop Exercises

Our Cybersecurity Solutions

Vulnerability Assessment & Penetration Testing

Blog

CVE-2020-3977: VMware Horizon DaaS Broken Authentication (MFA Bypass)

Not long ago, I assisted a client of ours with a penetration test of their VMware Horizon remote access solution and discovered a vulnerability affecting how it handles Multi-Factor Authentication (MFA). As a result, with a compromised user account password, I could gain access to the organisations internal network from the internet, bypassing the MFA

Read More »

Already know what you are after?

Get a quick quote from our consultants.

Scroll to Top