CVE-2020-36695
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2020-36695 is a vulnerability affecting multiple Hitachi management components on Linux, including Hitachi Device Manager, Hitachi Tiered Storage Manager, Hitachi Replication Manager, Hitachi Tuning Manager, and Hitachi Compute Systems Manager. These components have incorrect default permissions, enabling unauthorized file manipulation. Specifically, before versions 8.8.5-02 for the first four components and 8.8.3-08 for Hitachi Compute Systems Manager, an attacker can exploit this issue to modify, read, or delete sensitive files. This could potentially lead to data corruption, unauthorized access, or system compromise. Users are advised to update these components to their respective patched versions.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Hitachi Replication Manager
Affected Vendors
- Hitachi Ltd
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions