PT-2021-12796 · Vmware+1 · Vmware Vstorage+1

Published 2021-01-19 · Updated 2021-07-21 · CVE-2020-8581

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Clustered Data ONTAP versions prior to 9.3P20 and 9.5

Description: The issue allows an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage support is enabled.

Recommendations: For versions prior to 9.3P20, update to version 9.3P20 or later. For versions prior to 9.5, update to version 9.5 or later. As a temporary workaround, consider disabling VMware vStorage support until a patch is available.

Fix

Related Identifiers

CVE-2020-8581

Affected Products

Clustered Data Ontap

Vmware Vstorage

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-8581 · Security Note
• https://security.netapp.com/advisory/ntap-20210119-0001 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-8581 · Vendor Advisory
• https://t.me/cvenotify/8726 · Telegram Post
• https://t.me/cibsecurity/22292 · Telegram Post