CVE-2020-8583: High severity netapp hci vulnerability

Q: What is CVE-2020-8583?

CVE-2020-8583 is a vulnerability that exists in Element Software versions prior to 12.2 and HCI versions prior to 1.8P1, allowing attackers to intercept sensitive information transmitted within an https session.

Q: How severe is CVE-2020-8583?

CVE-2020-8583 has a severity rating of 7.5, which is considered high.

Q: How can an attacker exploit CVE-2020-8583?

An attacker can exploit CVE-2020-8583 by intercepting the transmission of sensitive information within an https session.

Q: Is there a fix available for CVE-2020-8583?

Yes, updating Element Software to version 12.2 or later, and HCI versions to 1.8P1 or later, can mitigate the vulnerability.

Published Nov 13, 2020

Updated

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmission within an https session.

Affected Software

2 affected components

NetApp Hci<=1.8

NetApp Element Os>=10.0<12.2

Event History

Nov 13, 2020

CVE Published

via MITRE·03:14 PM

Data Sourced

via MITRE·03:14 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-8583?

CVE-2020-8583 is a vulnerability that exists in Element Software versions prior to 12.2 and HCI versions prior to 1.8P1, allowing attackers to intercept sensitive information transmitted within an https session.

How severe is CVE-2020-8583?

CVE-2020-8583 has a severity rating of 7.5, which is considered high.

Which software versions are affected by CVE-2020-8583?

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are affected by CVE-2020-8583.

How can an attacker exploit CVE-2020-8583?

An attacker can exploit CVE-2020-8583 by intercepting the transmission of sensitive information within an https session.

Is there a fix available for CVE-2020-8583?