CVE-2020-8590 : Clustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which could allow an attacke

Clustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true.

Published 2021-02-08 22:15:12

Updated 2021-02-12 21:14:26

Source NetApp, Inc.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2020-8590

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-8590

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	1.8	1.4	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

Products affected by CVE-2020-8590

Netapp » Clustered Data Ontap
Versions from including (>=) 9.2 and before (<) 9.3
cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap
Versions before (<) 9.1
cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update P4
cpe:2.3:a:netapp:clustered_data_ontap:9.1:p4:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update P13
cpe:2.3:a:netapp:clustered_data_ontap:9.1:p13:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update P14
cpe:2.3:a:netapp:clustered_data_ontap:9.1:p14:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update P15
cpe:2.3:a:netapp:clustered_data_ontap:9.1:p15:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P10
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p10:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update RC1
cpe:2.3:a:netapp:clustered_data_ontap:9.1:rc1:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update P3
cpe:2.3:a:netapp:clustered_data_ontap:9.1:p3:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update P10
cpe:2.3:a:netapp:clustered_data_ontap:9.1:p10:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update P12
cpe:2.3:a:netapp:clustered_data_ontap:9.1:p12:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update P2
cpe:2.3:a:netapp:clustered_data_ontap:9.1:p2:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update P9
cpe:2.3:a:netapp:clustered_data_ontap:9.1:p9:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update P11
cpe:2.3:a:netapp:clustered_data_ontap:9.1:p11:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update P5
cpe:2.3:a:netapp:clustered_data_ontap:9.1:p5:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update P6
cpe:2.3:a:netapp:clustered_data_ontap:9.1:p6:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update P7
cpe:2.3:a:netapp:clustered_data_ontap:9.1:p7:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update P8
cpe:2.3:a:netapp:clustered_data_ontap:9.1:p8:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update P1
cpe:2.3:a:netapp:clustered_data_ontap:9.1:p1:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P3
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p3:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P5
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p5:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1
cpe:2.3:a:netapp:clustered_data_ontap:9.1:-:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3
cpe:2.3:a:netapp:clustered_data_ontap:9.3:-:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P1
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p1:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P2
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p2:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P4
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p4:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P6
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p6:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P7
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p7:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P8
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p8:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P9
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p9:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update RC1
cpe:2.3:a:netapp:clustered_data_ontap:9.3:rc1:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update P16
cpe:2.3:a:netapp:clustered_data_ontap:9.1:p16:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.1 Update RC2
cpe:2.3:a:netapp:clustered_data_ontap:9.1:rc2:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2020-8590

Exploit prediction scoring system (EPSS) score for CVE-2020-8590

CVSS scores for CVE-2020-8590

References for CVE-2020-8590

Products affected by CVE-2020-8590