Log in Start free

Vulnerability · Published Jul 18, 2023 · Assigned by Hitachi

CVE-2020-36695File and Directory Permission Vulnerability in Hitachi Command Suite

Medium 6.6

In plain English

A medium-severity incorrect default permissions in Hitachi Compute Systems Manager from Hitachi. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).

Severity (CVSS 3.1)6.6Medium
Exploit odds (30 days)0.2%top 95.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component), Hitachi Tiered Storage Manager on Linux, Hitachi Replication Manager on Linux, Hitachi Tuning Manager on Linux (Hitachi Tuning Manager server, Hitachi Tuning Manager - Agent for RAID, Hitachi Tuning Manager - Agent for NAS components), Hitachi Compute Systems Manager on Linux allows File Manipulation.This issue affects Hitachi Device Manager: before 8.8.5-02; Hitachi Tiered Storage Manager: before 8.8.5-02; Hitachi Replication Manager: before 8.8.5-02; Hitachi Tuning Manager: before 8.8.5-02; Hitachi Compute Systems Manager: before 8.8.3-08.

Affected products (as reported)

VendorProductVersions
Hitachi Hitachi Device Manager 0 – before 8.8.5-02
Hitachi Hitachi Tiered Storage Manager 0 – before 8.8.5-02
Hitachi Hitachi Replication Manager 0 – before 8.8.5-02
Hitachi Hitachi Tuning Manager 0 – before 8.8.5-02
Hitachi Hitachi Compute Systems Manager 0 – before 8.8.3-08

Weakness: CWE-276 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

References