« Volver al listado

CVE-2020-8578

Estado: ModificadaBaja (3.3)—

Clustered Data ONTAP versions prior to 9.3P20 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Netapp — Clustered Data Ontap

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-8578",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 3.3,
          "attackVector": "LOCAL",
          "baseSeverity": "LOW",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@netapp.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Clustered Data ONTAP",
          "versions": [
            {
              "status": "affected",
              "version": "Versions prior to 9.3P20"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-02-08T22:15:12.263",
  "references": [
    {
      "url": "https://security.netapp.com/advisory/NTAP-20210208-0002/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-alert@netapp.com"
    },
    {
      "url": "https://security.netapp.com/advisory/NTAP-20210208-0002/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Clustered Data ONTAP versions prior to 9.3P20 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true."
    },
    {
      "lang": "es",
      "value": "Clustered Data ONTAP versiones anteriores a 9.3P20, son susceptibles a una vulnerabilidad que podría permitir a un atacante detectar nombres de nodo por medio de paquetes de AutoSupport inclusive cuando el parámetro –remove-private-data se establece en true"
    }
  ],
  "lastModified": "2026-06-17T03:26:35.187",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2ADD72CC-ED33-4448-ADB2-F3FEF3DF1754",
              "versionEndExcluding": "9.3"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32B7A7A6-AFC0-47D2-AE92-A1751B7F0D34"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93C8874B-9D5B-4629-AA72-ED893CF5585A"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0ECBAC3F-F8C2-4DD0-92CC-947F37B24D54"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDDA828E-8DE6-4BFA-9CB4-DD22B3FD0495"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0FECE5C3-29EC-469B-BB28-3DE79F97DA33"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5B2E220-8FA2-46AD-9507-705391C4A5E9"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2038E75E-4315-4C9F-B4C6-4A4440DCBA89"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C1ACB5D-2542-4476-917D-67D6E3199EDE"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6482EBD8-9245-4250-B70B-57402954C0B8"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p8:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "61EF3D56-3C92-43D5-9A55-E2579BA9393B"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p9:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5220981-B4F6-4461-BEC4-6C304EA650A4"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "451A00C2-C3D8-4E31-90EC-4C64C909EDE9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-alert@netapp.com"
}