CVE Database
/

CVE-2020-36605

Back to search

CVE-2020-36605

Published: Nov 1, 2022

Modified: May 5, 2025

PUBLISHED

CVSS v3.1

6.6

MEDIUM

Description

Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files. This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00; Hitachi Ops Center Viewpoint: from 10.8.0-00 before 10.9.0-00.

VendorProductVersions

Hitachi

Hitachi Infrastructure Analytics Advisor

affected
2.0.0-00 - <= 4.4.0-00

Hitachi

Hitachi Ops Center Analyzer

affected
10.0.0-00 - < 10.9.0-00

Hitachi

Hitachi Ops Center Viewpoint

affected
10.8.0-00 - < 10.9.0-00

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

High

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now