CVE-2020-36695

published 2023-07-18

CVE-2020-36695: Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component), Hitachi Tiered Storage Manager on Linux…

Priority P3 41 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component), Hitachi Tiered Storage Manager on Linux, Hitachi Replication Manager on Linux, Hitachi Tuning Manager on Linux (Hitachi Tuning Manager server, Hitachi Tuning Manager - Agent for RAID, Hitachi Tuning Manager - Agent for NAS

components), Hitachi Compute Systems Manager on Linux allows File Manipulation.This issue affects Hitachi Device Manager: before 8.8.5-02; Hitachi Tiered Storage Manager: before 8.8.5-02; Hitachi Replication Manager: before 8.8.5-02; Hitachi Tuning Manager: before 8.8.5-02; Hitachi Compute Systems Manager: before 8.8.3-08.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
hitachi	compute_systems_manager	< 8.8.3-08	8.8.3-08
hitachi	device_manager	< 8.8.5-02	8.8.5-02
hitachi	hitachi_compute_systems_manager	< 8.8.3-08	8.8.3-08
hitachi	hitachi_device_manager	< 8.8.5-02	8.8.5-02
hitachi	hitachi_replication_manager	< 8.8.5-02	8.8.5-02
hitachi	hitachi_tiered_storage_manager	< 8.8.5-02	8.8.5-02
hitachi	hitachi_tuning_manager	< 8.8.5-02	8.8.5-02
hitachi	replication_manager	< 8.8.5-02	8.8.5-02
hitachi	tiered_storage_manager	< 8.8.5-02	8.8.5-02
hitachi	tuning_manager	< 8.8.5-02	8.8.5-02

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-276