Lucene search

[email protected]CVE-2020-8587

HistoryFeb 08, 2021 - 10:15 p.m.

CVE-2020-8587

2021-02-0822:15:12

[email protected]

web.nvd.nist.gov

cve-2020-8587

oncommand system manager

vulnerability

http

security

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

OnCommand System Manager 9.x versions prior to 9.3P20 and 9.4 prior to 9.4P3 are susceptible to a vulnerability that could allow HTTP clients to cache sensitive responses making them accessible to an attacker who has access to the system where the client runs.

Affected configurations

NVD

Node

netapponcommand_system_managerRange9.0–9.3

netapponcommand_system_managerMatch9.3-

netapponcommand_system_managerMatch9.4-

CPENameOperatorVersion
netapp:oncommand_system_managernetapp oncommand system managerlt9.3
netapp:oncommand_system_managernetapp oncommand system managereq9.4

CPE	Name	Operator	Version
netapp:oncommand_system_manager	netapp oncommand system manager	lt	9.3
netapp:oncommand_system_manager	netapp oncommand system manager	eq	9.4

CNA Affected

[
  {
    "product": "OnCommand System Manager 9.x",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 9.x prior to 9.3P20 and 9.4 prior to 9.4P3"
      }
    ]
  }
]

References

security.netapp.com/advisory/NTAP-20210208-0001/

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2020-8587

prion1 cvelist1 nvd1 lenovo1