PT-2020-20224 · Netapp · Element+1

Published 2020-11-13 · Updated 2021-05-10 · CVE-2020-8583

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Element Software versions prior to 12.2 HCI versions prior to 1.8P1

Description The issue allows an attacker to discover sensitive information by intercepting its transmission within an https session.

Recommendations For Element Software versions prior to 12.2, update to version 12.2 or later. For HCI versions prior to 1.8P1, update to version 1.8P1 or later.

Fix

Related Identifiers

CVE-2020-8583

Affected Products

Element

Hci

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-8583 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8583 · Vendor Advisory
• https://security.netapp.com/advisory/NTAP-20201113-0008 · Vendor Advisory
• https://t.me/cvenotify/5968 · Telegram Post
• https://t.me/cibsecurity/16289 · Telegram Post