Vulnerability · Published Feb 8, 2021 · Assigned by netapp
CVE-2020-8587
Medium 5.5
In plain English
A medium-severity security flaw in OnCommand System Manager 9.x. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).
Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.4%top 70.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
OnCommand System Manager 9.x versions prior to 9.3P20 and 9.4 prior to 9.4P3 are susceptible to a vulnerability that could allow HTTP clients to cache sensitive responses making them accessible to an attacker who has access to the system where the client runs.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | OnCommand System Manager 9.x | Versions 9.x prior to 9.3P20 and 9.4 prior to 9.4P3 |
References
- https://security.netapp.com/advisory/NTAP-20210208-0001/ x_refsource_MISC