PT-2020-20413 · Western Digital+1 · Western Digital My Cloud Home+1

Published 2020-02-20 · Updated 2020-02-24 · CVE-2020-8990

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Western Digital My Cloud Home versions prior to 3.6.0 ibi versions prior to 3.6.0

Description The issue allows Session Fixation.

Recommendations For Western Digital My Cloud Home versions prior to 3.6.0, update to version 3.6.0 or later. For ibi versions prior to 3.6.0, update to version 3.6.0 or later.

Fix

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2020-8990

Affected Products

Western Digital My Cloud Home

Ibi

References · 5

• https://westerndigital.com/support/productsecurity/wdc-19013-my-cloud-home-and-ibi-session-invalidation-vulnerability · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-8990 · Vendor Advisory
• https://support.wdc.com/downloads.aspx?g=907&lang=en#downloads · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8990 · Security Note
• https://t.me/cvenotify/1119 · Telegram Post