CVE-2020-36605 : Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe compon

Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files. This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00; Hitachi Ops Center Viewpoint: from 10.8.0-00 before 10.9.0-00.

Published 2022-11-01 03:15:11

Updated 2023-03-01 15:41:35

Source Hitachi, Ltd.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2020-36605

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-36605

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.6	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H	1.8	4.7	Hitachi, Ltd.
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: Low Availability: High
4.4	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N	1.8	2.5	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: Low Availability: None

References for CVE-2020-36605

https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-134/index.html

Multiple Vulnerabilities in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Viewpoint: Software Vulnerability Information: Software: Hitachi
Vendor Advisory

CVEs referencing this url

Products affected by CVE-2020-36605

Hitachi » Infrastructure Analytics Advisor
Versions from including (>=) 2.0.0-00 and up to, including, (<=) 4.4.0-00
cpe:2.3:a:hitachi:infrastructure_analytics_advisor:*:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A For X64
When used together with: Microsoft » Windows » Version: N/A For X64
Hitachi » Ops Center Analyzer
Versions from including (>=) 10.0.0-00 and before (<) 10.9.0-00
cpe:2.3:a:hitachi:ops_center_analyzer:*:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A For X64
Hitachi » Ops Center Viewpoint
Versions from including (>=) 10.8.0-00 and before (<) 10.9.0-00
cpe:2.3:a:hitachi:ops_center_viewpoint:*:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A For X64

Vulnerability Details : CVE-2020-36605

Exploit prediction scoring system (EPSS) score for CVE-2020-36605

CVSS scores for CVE-2020-36605

CWE ids for CVE-2020-36605

References for CVE-2020-36605

Products affected by CVE-2020-36605