CVE Feed

    Dashboard / CVE / CVE-2020-36652

    CVE-2020-36652

    Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Advisor on Linux (Hitachi Infrastructure Analytics Advisor, Analytics probe server components), Hitachi Ops Center Automator on Linux, Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer, Analyzer probe server components), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files. This issue affects Hitachi Automation Director: from 8.2.0-00 through 10.6.1-00; Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.0.0-00; Hitachi Ops Center Automator: before 10.9.1-00; Hitachi Ops Center Analyzer: before 10.9.1-00; Hitachi Ops Center Viewpoint: before 10.9.1-00.

    Published:Feb 28, 2023
    Last Modified:Mar 7, 2025
    EPS:Feb 28, 2023
    EPSS Score:0.00031
    CVSS Score:6.6

    Affected Products

    Vendor
    Hitachi
    Product
    Automation Director
    Vendor
    Hitachi
    Product
    Infrastructure Analytics Advisor
    Vendor
    Hitachi
    Product
    Ops Center Analyzer
    Vendor
    Hitachi
    Product
    Ops Center Automator
    Vendor
    Hitachi
    Product
    Ops Center Viewpoint
    Vendor
    Linux
    Product
    Linux Kernel

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-276 Incorrect Default Permissions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High