Sensitive Information Disclosure in OnCommand Unified Manager by NetApp
CVE-2020-8585

5.5MEDIUM

Key Information:

Vendor
Netapp
Status
Oncommand Unified Manager For 7-mode (core Package)
Vendor
CVE Published:
28 January 2021

Summary

The OnCommand Unified Manager Core Package prior to version 5.2.5 is vulnerable to a security flaw that allows unauthorized users to access sensitive account information. This security issue arises when using PuTTY Link (plink), posing a risk of potential information leakage. The presence of this vulnerability highlights the importance of upgrading to the latest version to ensure user data protection and maintain system integrity. Users are strongly advised to review their version and apply updates to mitigate any risks associated with this vulnerability.

Affected Version(s)

OnCommand Unified Manager for 7-Mode (core package) Prior to 5.2.5

References

https://security.netapp.com/advisory/ntap-20210128-0001/
x_refsource_CONFIRM
https://security.netapp.com/advisory/NTAP-20210128-0001
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2020-8585 : Sensitive Information Disclosure in OnCommand Unified Manager by NetApp | SecurityVulnerability.io