CVE-2020-8587

EUVD-2020-29435
OnCommand System Manager 9.x versions prior to 9.3P20 and 9.4 prior to 9.4P3 are susceptible to a vulnerability that could allow HTTP clients to cache sensitive responses making them accessible to an attacker who has access to the system where the client runs.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 39%
Affected Products (NVD)
VendorProductVersion
netapponcommand_system_manager
9.0 ≤
𝑥
< 9.3
netapponcommand_system_manager
9.3
netapponcommand_system_manager
9.4
𝑥
= Vulnerable software versions
References
https://security.netapp.com/advisory/NTAP-20210208-0001/
https://security.netapp.com/advisory/NTAP-20210208-0001/