CVE-2020-8589

Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the names of other Storage Virtual Machines (SVMs) and filenames on those SVMs.

Published: Feb 3, 2021
Updated: Apr 14, 2023
CVE: CVE-2020-8589
Severity: Low
Exploit:

CVSS v3:

Severity: Low
Score: 3.5
AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

Severity: Low
Score: 2.7
AV:A/AC:L/Au:S/C:P/I:N/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
netapp / clustered_data_ontap	9.3-p1	9.3-p1.x
netapp / clustered_data_ontap	9.3-p2	9.3-p2.x
netapp / clustered_data_ontap	9.3-p3	9.3-p3.x
netapp / clustered_data_ontap	9.3-p4	9.3-p4.x
netapp / clustered_data_ontap	9.3-p5	9.3-p5.x
netapp / clustered_data_ontap	9.3-p6	9.3-p6.x
netapp / clustered_data_ontap	9.3-p7	9.3-p7.x
netapp / clustered_data_ontap	9.3-p8	9.3-p8.x
netapp / clustered_data_ontap	9.3	9.3.x
netapp / clustered_data_ontap	9.3-p9	9.3-p9.x
netapp / clustered_data_ontap	9.3-p10	9.3-p10.x
netapp / clustered_data_ontap	9.3-rc1	9.3-rc1.x
netapp / clustered_data_ontap	9.5	9.5.x
netapp / clustered_data_ontap	9.5-p1	9.5-p1.x
netapp / clustered_data_ontap	-	9.3
netapp / clustered_data_ontap	9.5-p6	9.5-p6.x
netapp / clustered_data_ontap	9.5-p8	9.5-p8.x
netapp / clustered_data_ontap	9.5-p9	9.5-p9.x
netapp / clustered_data_ontap	9.4	9.5

https://security.netapp.com/advisory/ntap-20210201-0002/

Vulnerability Database

289,599

CVE-2020-8589