CVE-2020-36605: File Permissions Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer, Hitachi Ops Center Viewpoint
First published: Tue Nov 01 2022(Updated: )
Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files. This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00; Hitachi Ops Center Viewpoint: from 10.8.0-00 before 10.9.0-00.
Credit: hirt@hitachi.co.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hitachi Infrastructure Analytics Advisor | >=2.0.0-00<=4.4.0-00 | |
| Linux Linux kernel | ||
| Microsoft Windows | ||
| Hitachi Ops Center Analyzer | >=10.0.0-00<10.9.0-00 | |
| Hitachi Ops Center Viewpoint | >=10.8.0-00<10.9.0-00 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-36605?
CVE-2020-36605 is an Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux, Hitachi Ops Center Analyzer on Linux, and Hitachi Ops Center Viewpoint on Linux.
How does CVE-2020-36605 affect Hitachi Infrastructure Analytics Advisor?
CVE-2020-36605 allows local users to read and write sensitive data in Hitachi Infrastructure Analytics Advisor on Linux.
How does CVE-2020-36605 affect Hitachi Ops Center Analyzer?
CVE-2020-36605 allows local users to read and write sensitive data in Hitachi Ops Center Analyzer on Linux.
How does CVE-2020-36605 affect Hitachi Ops Center Viewpoint?
CVE-2020-36605 allows local users to read and write sensitive data in Hitachi Ops Center Viewpoint on Linux.
What is the severity rating of CVE-2020-36605?
CVE-2020-36605 has a severity rating of 4.4 (medium).
Where can I find more information about CVE-2020-36605?
You can find more information about CVE-2020-36605 at the following link: [https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-134/index.html](https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-134/index.html).
What is the Common Weakness Enumeration (CWE) ID for CVE-2020-36605?
The Common Weakness Enumeration (CWE) ID for CVE-2020-36605 is 276.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/references
- agent/title
- agent/last-modified-date
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/hitachi
- canonical/hitachi infrastructure analytics advisor
- version/hitachi infrastructure analytics advisor/2.0.0-00
- version/hitachi infrastructure analytics advisor/4.4.0-00
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- canonical/hitachi ops center analyzer
- version/hitachi ops center analyzer/10.0.0-00
- canonical/hitachi ops center viewpoint
- version/hitachi ops center viewpoint/10.8.0-00