3.3

CVE-2020-8590

Clustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true.

Data is provided by the National Vulnerability Database (NVD)
NetappClustered Data Ontap Version < 9.1
NetappClustered Data Ontap Version >= 9.2 < 9.3
NetappClustered Data Ontap Version9.1 Update-
NetappClustered Data Ontap Version9.1 Updatep1
NetappClustered Data Ontap Version9.1 Updatep10
NetappClustered Data Ontap Version9.1 Updatep11
NetappClustered Data Ontap Version9.1 Updatep12
NetappClustered Data Ontap Version9.1 Updatep13
NetappClustered Data Ontap Version9.1 Updatep14
NetappClustered Data Ontap Version9.1 Updatep15
NetappClustered Data Ontap Version9.1 Updatep16
NetappClustered Data Ontap Version9.1 Updatep2
NetappClustered Data Ontap Version9.1 Updatep3
NetappClustered Data Ontap Version9.1 Updatep4
NetappClustered Data Ontap Version9.1 Updatep5
NetappClustered Data Ontap Version9.1 Updatep6
NetappClustered Data Ontap Version9.1 Updatep7
NetappClustered Data Ontap Version9.1 Updatep8
NetappClustered Data Ontap Version9.1 Updatep9
NetappClustered Data Ontap Version9.1 Updaterc1
NetappClustered Data Ontap Version9.1 Updaterc2
NetappClustered Data Ontap Version9.3 Update-
NetappClustered Data Ontap Version9.3 Updatep1
NetappClustered Data Ontap Version9.3 Updatep10
NetappClustered Data Ontap Version9.3 Updatep2
NetappClustered Data Ontap Version9.3 Updatep3
NetappClustered Data Ontap Version9.3 Updatep4
NetappClustered Data Ontap Version9.3 Updatep5
NetappClustered Data Ontap Version9.3 Updatep6
NetappClustered Data Ontap Version9.3 Updatep7
NetappClustered Data Ontap Version9.3 Updatep8
NetappClustered Data Ontap Version9.3 Updatep9
NetappClustered Data Ontap Version9.3 Updaterc1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.07% 0.17
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.3 1.8 1.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N