CVE-2020-36695
Published: Jul 18, 2023
Modified: Oct 21, 2024
CVSS v3.1
6.6
Description
Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component), Hitachi Tiered Storage Manager on Linux, Hitachi Replication Manager on Linux, Hitachi Tuning Manager on Linux (Hitachi Tuning Manager server, Hitachi Tuning Manager - Agent for RAID, Hitachi Tuning Manager - Agent for NAS components), Hitachi Compute Systems Manager on Linux allows File Manipulation.This issue affects Hitachi Device Manager: before 8.8.5-02; Hitachi Tiered Storage Manager: before 8.8.5-02; Hitachi Replication Manager: before 8.8.5-02; Hitachi Tuning Manager: before 8.8.5-02; Hitachi Compute Systems Manager: before 8.8.3-08.
| Vendor | Product | Versions |
|---|---|---|
Hitachi | Hitachi Device Manager | affected 0 - < 8.8.5-02 |
Hitachi | Hitachi Tiered Storage Manager | affected 0 - < 8.8.5-02 |
Hitachi | Hitachi Replication Manager | affected 0 - < 8.8.5-02 |
Hitachi | Hitachi Tuning Manager | affected 0 - < 8.8.5-02 |
Hitachi | Hitachi Compute Systems Manager | affected 0 - < 8.8.3-08 |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now