CVE Feed

    Dashboard / CVE / CVE-2020-8585

    CVE-2020-8585

    OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link (plink).

    Published:Jan 28, 2021
    Last Modified:Nov 21, 2024
    EPS:Jan 28, 2021
    EPSS Score:0.00139
    CVSS Score:5.5

    Affected Products

    Vendor
    Netapp
    Product
    Oncommand Unified Manager

    Exploits

    No exploit reference

    Related CVEs

    CVE-2020-14792 (CVSS 4.2) — Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versi…
    CVE-2020-14796 (CVSS 3.1) — Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported ver…
    CVE-2020-14798 (CVSS 3.1) — Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported ver…
    CVE-2020-14797 (CVSS 3.7) — Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported ver…
    CVE-2020-14803 (CVSS 5.3) — Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are aff…
    CVE-2019-5482 (CVSS 9.8) — Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.…
    CVE-2019-18276 (CVSS 7.8) — An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash …
    CVE-2019-5443 (CVSS 7.8) — A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/l…
    CVE-2019-5495 (CVSS 7.5) — OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Secu…
    CVE-2019-5494 (CVSS 7.5) — OnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security headers configur…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High