« Volver al listado

CVE-2020-8572

Estado: ModificadaAlta (7.5)—

Element OS prior to version 12.0 and Element HealthTools prior to version 2020.04.01.04 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Netapp — Element HealthtoolsNetapp — Element OS

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-8572",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@netapp.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Sensitive Information Disclosure Vulnerability in Element OS and Element HealthTools",
          "versions": [
            {
              "status": "affected",
              "version": "Element OS prior to version 12.0 and Element HealthTools prior to version 2020.04.01.04"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-05-21T15:15:09.950",
  "references": [
    {
      "url": "https://security.netapp.com/advisory/ntap-20200520-0001/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "security-alert@netapp.com"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20200520-0001/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Element OS prior to version 12.0 and Element HealthTools prior to version 2020.04.01.04 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information."
    },
    {
      "lang": "es",
      "value": "Element OS versiones anteriores a la versión  12.0 y Element HealthTools versiones anteriores a la versión 2020.04.01.04, son susceptibles a una vulnerabilidad que, cuando se explota con éxito, podría conllevar a una divulgación de información sensible."
    }
  ],
  "lastModified": "2026-06-17T03:26:34.580",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netapp:element_healthtools:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ACFC0052-D111-428F-92EB-EA0086677112",
              "versionEndExcluding": "2020.04.01.04"
            },
            {
              "criteria": "cpe:2.3:o:netapp:element_os:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "85DDDB1C-06E7-4230-8DDA-2CDC0F2F9180",
              "versionEndExcluding": "12.0",
              "versionStartIncluding": "10.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-alert@netapp.com"
}