5.5
CVE-2020-8587
- EPSS 0.18%
- Veröffentlicht 08.02.2021 22:15:12
- Zuletzt bearbeitet 21.11.2024 05:39:04
- Quelle security-alert@netapp.com
- Teams Watchlist Login
- Unerledigt Login
OnCommand System Manager 9.x versions prior to 9.3P20 and 9.4 prior to 9.4P3 are susceptible to a vulnerability that could allow HTTP clients to cache sensitive responses making them accessible to an attacker who has access to the system where the client runs.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netapp ≫ Oncommand System Manager Version >= 9.0 < 9.3
Netapp ≫ Oncommand System Manager Version9.3 Update-
Netapp ≫ Oncommand System Manager Version9.4 Update-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.18% | 0.365 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|