6.6
Medium
CVE-2020-36695 Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component),…
Description
Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component), Hitachi Tiered Storage Manager on Linux, Hitachi Replication Manager on Linux, Hitachi Tuning Manager on Linux (Hitachi Tuning Manager server, Hitachi Tuning Manager - Agent for RAID, Hitachi Tuning Manager - Agent for NAS components), Hitachi Compute Systems Manager on Linux allows File Manipulation.This issue affects Hitachi Device Manager: before 8.8.5-02; Hitachi Tiered Storage Manager: before 8.8.5-02; Hitachi Replication Manager: before 8.8.5-02; Hitachi Tuning Manager: before 8.8.5-02; Hitachi Compute Systems Manager: before 8.8.3-08.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Hitachi Device Manager 8.8 | earliest → < 8.8.5-02 | 8.8.5-02 |
| Hitachi Tiered Storage Manager 8.8 | earliest → < 8.8.5-02 | 8.8.5-02 |
| Hitachi Replication Manager 8.8 | earliest → < 8.8.5-02 | 8.8.5-02 |
| Hitachi Tuning Manager 8.8 | earliest → < 8.8.5-02 | 8.8.5-02 |
| Hitachi Compute Systems Manager 8.8 | earliest → < 8.8.3-08 | 8.8.3-08 |
Other CVEs of Hitachi Device Manager
The 7 CVEs of Hitachi Device Manager →
CVE-2025-5781
Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager,…
5.2
Medium
CVE-2024-5963
Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows (Device Manager Server component).This issue…
6.7
Medium
CVE-2023-49107
Generation of Error Message Containing Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux…
5.3
Medium
CVE-2023-49106
Missing Password Field Masking vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Agent…
4.6
Medium