CVE-2020-36695

Summary

CVE-2020-36695 is a vulnerability affecting multiple Hitachi management components on Linux, including Hitachi Device Manager, Hitachi Tiered Storage Manager, Hitachi Replication Manager, Hitachi Tuning Manager, and Hitachi Compute Systems Manager. These components have incorrect default permissions, enabling unauthorized file manipulation. Specifically, before versions 8.8.5-02 for the first four components and 8.8.3-08 for Hitachi Compute Systems Manager, an attacker can exploit this issue to modify, read, or delete sensitive files. This could potentially lead to data corruption, unauthorized access, or system compromise. Users are advised to update these components to their respective patched versions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.