CVE-2020-8696 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 49%

Affected Products (NVD)

Vendor	Product	Version
intel	microcode	-
netapp	clustered_data_ontap	-
netapp	hcl_compute_node_bios	-
netapp	hci_storage_node_bios	-
netapp	solidfire_bios	-
debian	debian_linux	9.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

intel-microcode

bookworm/non-free-firmware	3.20240813.1~deb12u1 fixed
bookworm/non-free-firmware (security)	3.20231114.1~deb12u1 fixed
bullseye/non-free	3.20240813.1~deb11u1 fixed
bullseye/non-free (security)	3.20231114.1~deb11u1 fixed
sid/non-free-firmware	3.20240910.1 fixed
trixie/non-free-firmware	3.20240910.1 fixed

Ubuntu Releases

Ubuntu Product

Codename

intel-microcode

bionic	Fixed 3.20201110.0ubuntu0.18.04.1 released
eoan	ignored
focal	Fixed 3.20201110.0ubuntu0.20.04.1 released
groovy	Fixed 3.20201110.0ubuntu0.20.10.1 released
trusty	Fixed 3.20201110.0ubuntu0.14.04.1 released
xenial	Fixed 3.20201110.0ubuntu0.16.04.1 released

Common Weakness Enumeration

CWE-212 - Improper Removal of Sensitive Information Before Storage or Transfer
The product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors.

References

https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/

https://security.netapp.com/advisory/ntap-20201113-0006/

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381

https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/

https://security.netapp.com/advisory/ntap-20201113-0006/

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381