CVE-2020-36605
Last modified
CVE-2020-36605 is a medium-severity vulnerability rated 4.4/10 on the CVSS scale. Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files. This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00; Hitachi Ops Center Viewpoint: from 10.8.0-00 before 10.9.0-00. . EPSS estimates a 0.15% chance of exploitation in the next 30 days.
Description
Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files. This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00; Hitachi Ops Center Viewpoint: from 10.8.0-00 before 10.9.0-00.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Hitachi | Infrastructure Analytics Advisor | >= 2.0.0-00, <= 4.4.0-00 |
| Hitachi | Ops Center Analyzer | >= 10.0.0-00, < 10.9.0-00 |
| Hitachi | Ops Center Viewpoint | >= 10.8.0-00, < 10.9.0-00 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-36605?
How severe is CVE-2020-36605?
How do I fix CVE-2020-36605?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-3660Possible null-pointer dereference can occur while parsing mp…9.8
- CVE-2020-36600Out-of-bounds write vulnerability in the power consumption m…7.5
- CVE-2020-36601Out-of-bounds write vulnerability in the kernel modules. Suc…7.5
- CVE-2020-36602There is an out-of-bounds read and write vulnerability in so…6.1
- CVE-2020-36603The HoYoVerse (formerly miHoYo) Genshin Impact mhyprot2.sys …6.5
- CVE-2020-36604hoek before 8.5.1 and 9.x before 9.0.3 allows prototype pois…8.1
- CVE-2020-36607Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 a…6.1
- CVE-2020-36608A vulnerability, which was classified as problematic, has be…6.1
- CVE-2020-36609A vulnerability was found in annyshow DuxCMS 2.1. It has bee…5.4
- CVE-2020-3661Buffer overflow will happen while parsing mp4 clip with corr…9.8
- CVE-2020-36610A vulnerability was found in annyshow DuxCMS 2.1. It has bee…8
- CVE-2020-36611Incorrect Default Permissions vulnerability in Hitachi Tunin…7.1
Are you affected by CVE-2020-36605?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST