CVE-2020-8585

EUVD-2020-29433
OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link (plink).
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 33%
Affected Products (NVD)
VendorProductVersion
netapponcommand_unified_manager
𝑥
< 5.2.5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.netapp.com/advisory/NTAP-20210128-0001
https://security.netapp.com/advisory/ntap-20210128-0001/
https://security.netapp.com/advisory/NTAP-20210128-0001
https://security.netapp.com/advisory/ntap-20210128-0001/