VULNERABILITY INTELLIGENCE
CVE-2020-36605
CVSS score6.6 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2022-11-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Description
Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files. This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00; Hitachi Ops Center Viewpoint: from 10.8.0-00 before 10.9.0-00.
Weakness classification
- hirt@hitachi.co.jp: CWE-276
- nvd@nist.gov: CWE-276
Primary references
- hirt@hitachi.co.jp — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory