PT-2023-3692 · Hitachi · Hitachi Tiered Storage Manager+4
CVE-2020-36695
·
Publicado
2023-06-06
·
Atualizado
2023-07-27
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Hitachi Device Manager versions prior to 8.8.5-02
Hitachi Tiered Storage Manager versions prior to 8.8.5-02
Hitachi Replication Manager versions prior to 8.8.5-02
Hitachi Tuning Manager versions prior to 8.8.5-02
Hitachi Compute Systems Manager versions prior to 8.8.3-08
Description
The issue is related to incorrect default permissions in the Device Manager Server component, Hitachi Tuning Manager server, Hitachi Tuning Manager - Agent for RAID, and Hitachi Tuning Manager - Agent for NAS components of Hitachi Device Manager, Hitachi Tiered Storage Manager, and Hitachi Tuning Manager systems. This allows file manipulation, potentially enabling an attacker to read, modify, or delete data.
Recommendations
For Hitachi Device Manager versions prior to 8.8.5-02, update to version 8.8.5-02 or later.
For Hitachi Tiered Storage Manager versions prior to 8.8.5-02, update to version 8.8.5-02 or later.
For Hitachi Replication Manager versions prior to 8.8.5-02, update to version 8.8.5-02 or later.
For Hitachi Tuning Manager versions prior to 8.8.5-02, update to version 8.8.5-02 or later.
For Hitachi Compute Systems Manager versions prior to 8.8.3-08, update to version 8.8.3-08 or later.
Correção
Incorrect Default Permissions
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Hitachi Compute Systems Manager
Hitachi Device Manager
Hitachi Replication Manager
Hitachi Tiered Storage Manager
Hitachi Tuning Manager