CVE Feed

    Dashboard / CVE / CVE-2020-36605

    CVE-2020-36605

    Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files. This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00; Hitachi Ops Center Viewpoint: from 10.8.0-00 before 10.9.0-00.

    Published:Nov 1, 2022
    Last Modified:May 5, 2025
    EPS:Nov 1, 2022
    EPSS Score:0.00042
    CVSS Score:6.6

    Affected Products

    Vendor
    Hitachi
    Product
    Infrastructure Analytics Advisor
    Vendor
    Hitachi
    Product
    Ops Center Analyzer
    Vendor
    Hitachi
    Product
    Ops Center Viewpoint
    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Microsoft
    Product
    Windows

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-276 Incorrect Default Permissions

    Related CVEs

    CVE-2026-3314 (CVSS 4.6) — Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detai…
    CVE-2026-2072 (CVSS 8.2) — Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor (Analytics probe component), Hi…
    CVE-2025-66444 (CVSS 8.2) — Cross-site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics componen…
    CVE-2025-66445 (CVSS 7.1) — Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics componen…
    CVE-2025-1245 (CVSS 6.5) — Bypass Connection Restriction vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics…
    CVE-2024-10205 (CVSS 9.4) — Authentication Bypass vulnerability in Hitachi Ops Center Analyzer on Linux, 64 bit (Hitachi Ops Center Analyz…
    CVE-2020-36652 (CVSS 6.6) — Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure An…
    CVE-2022-4895 (CVSS 8.6) — Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics …
    CVE-2022-41553 (CVSS 6.5) — Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advis…
    CVE-2022-41552 (CVSS 9.8) — Server-Side Request Forgery (SSRF) vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Data Ce…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High