Vulnerability in Hitachi Infrastructure Analytics Advisor
CVE-2020-36605
Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files. This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00; Hitachi Ops Center Viewpoint: from 10.8.0-00 before 10.9.0-00.
EPSS: 0.002 (4.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.6 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H.
Affected products
- Hitachi Infrastructure Analytics Advisor — versions 2.0.0-00
- Hitachi Ops Center Analyzer — versions 10.0.0-00
- Hitachi Ops Center Viewpoint — versions 10.8.0-00
- Hitachi Infrastructure_analytics_advisor
- Hitachi Ops_center_analyzer
- Hitachi Ops_center_viewpoint
- Linux Linux_kernel
- Microsoft Windows
Weakness classification (CWE)
Public proof-of-concept exploits
References
- hirt@hitachi.co.jp (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-36605?
- CVE-2020-36605 is a medium-severity vulnerability in Hitachi Infrastructure Analytics Advisor, classified under Incorrect Default Permissions. CVSS score: 6.6/10. Published 2022-11-01.
- How severe is CVE-2020-36605?
- Medium severity. CVSS v3 base score is 6.6 out of 10.
- Is CVE-2020-36605 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.