Vulnerability · Published Nov 1, 2022 · Assigned by Hitachi
CVE-2020-36605File Permissions Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer, Hitachi Ops Center Viewpoint
Medium 6.6
In plain English
A medium-severity incorrect default permissions in Hitachi Infrastructure Analytics Advisor from Hitachi. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Official description
Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files. This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00; Hitachi Ops Center Viewpoint: from 10.8.0-00 before 10.9.0-00.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hitachi | Hitachi Infrastructure Analytics Advisor | 2.0.0-00 – through 4.4.0-00 |
| Hitachi | Hitachi Ops Center Analyzer | 10.0.0-00 – before 10.9.0-00 |
| Hitachi | Hitachi Ops Center Viewpoint | 10.8.0-00 – before 10.9.0-00 |
Weakness: CWE-276 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H