CVE-2020-8581

Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage support is enabled.

Published: Jan 19, 2021
Updated: Apr 14, 2023
CVE: CVE-2020-8581
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.5
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CVSS v2:

Severity: Low
Score: 3.5
AV:N/AC:M/Au:S/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
netapp / clustered_data_ontap	9.3-p1	9.3-p1.x
netapp / clustered_data_ontap	9.3-p2	9.3-p2.x
netapp / clustered_data_ontap	9.3-p3	9.3-p3.x
netapp / clustered_data_ontap	9.3-p4	9.3-p4.x
netapp / clustered_data_ontap	9.3-p5	9.3-p5.x
netapp / clustered_data_ontap	9.3-p6	9.3-p6.x
netapp / clustered_data_ontap	9.3-p7	9.3-p7.x
netapp / clustered_data_ontap	9.3-p8	9.3-p8.x
netapp / clustered_data_ontap	9.3	9.3.x
netapp / clustered_data_ontap	9.3-p9	9.3-p9.x
netapp / clustered_data_ontap	9.3-p10	9.3-p10.x
netapp / clustered_data_ontap	-	9.3
netapp / clustered_data_ontap	9.4	9.5.x

https://security.netapp.com/advisory/ntap-20210119-0001/

Vulnerability Database

289,599

CVE-2020-8581