CVE-2020-8576 (GCVE-0-2020-8576)
Vulnerability from cvelistv5 – Published: 2020-09-02 19:15 – Updated: 2024-08-04 10:03
VLAI
EPSS
VEX
Summary
Clustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data or disclosure of sensitive information.
Severity
5.4 (Medium)
CWE
- Sensitive Information Disclosure
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://security.netapp.com/advisory/NTAP-2020090… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | Clustered Data ONTAP |
Affected:
Versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T10:03:46.177Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://security.netapp.com/advisory/NTAP-20200902-0001/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Clustered Data ONTAP",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Clustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data or disclosure of sensitive information."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Sensitive Information Disclosure",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-09-02T19:15:35.000Z",
"orgId": "11fdca00-0482-4c88-a206-37f9c182c87d",
"shortName": "netapp"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://security.netapp.com/advisory/NTAP-20200902-0001/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security-alert@netapp.com",
"ID": "CVE-2020-8576",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Clustered Data ONTAP",
"version": {
"version_data": [
{
"version_value": "Versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Clustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data or disclosure of sensitive information."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Sensitive Information Disclosure"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://security.netapp.com/advisory/NTAP-20200902-0001/",
"refsource": "MISC",
"url": "https://security.netapp.com/advisory/NTAP-20200902-0001/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "11fdca00-0482-4c88-a206-37f9c182c87d",
"assignerShortName": "netapp",
"cveId": "CVE-2020-8576",
"datePublished": "2020-09-02T19:15:35.000Z",
"dateReserved": "2020-02-03T00:00:00.000Z",
"dateUpdated": "2024-08-04T10:03:46.177Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2020-8576",
"date": "2026-10-21",
"epss": "0.00733",
"percentile": "0.53787"
},
"nvd": {
"cve": {
"affected": [
{
"affectedData": [
{
"product": "Clustered Data ONTAP",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7"
}
]
}
],
"source": "security-alert@netapp.com"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:-:*:*:*:*:*:*",
"matchCriteriaId": "32B7A7A6-AFC0-47D2-AE92-A1751B7F0D34",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p1:*:*:*:*:*:*",
"matchCriteriaId": "93C8874B-9D5B-4629-AA72-ED893CF5585A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p10:*:*:*:*:*:*",
"matchCriteriaId": "0ECBAC3F-F8C2-4DD0-92CC-947F37B24D54",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p11:*:*:*:*:*:*",
"matchCriteriaId": "98013392-2043-4C56-810D-764AF2A98B8F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p12:*:*:*:*:*:*",
"matchCriteriaId": "CC2B7062-8028-4574-9880-62BD069C6B9D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p12d3:*:*:*:*:*:*",
"matchCriteriaId": "70C38241-6D53-4FB2-A9E0-C8E1CB666058",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p13:*:*:*:*:*:*",
"matchCriteriaId": "AE4B1361-5AD1-4F85-876A-BB304E521D1E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p14:*:*:*:*:*:*",
"matchCriteriaId": "1CB4229C-4D85-4B44-B6E9-13F1F726E06A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p14d3:*:*:*:*:*:*",
"matchCriteriaId": "697ECEEE-7833-4390-ACE5-A49D9CFCA3D7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p15:*:*:*:*:*:*",
"matchCriteriaId": "5F50A1C1-BEB6-4753-A8E4-940760AA9AEB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p15d7:*:*:*:*:*:*",
"matchCriteriaId": "2BE02A82-7325-4403-A822-5C0340DBA978",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p16:*:*:*:*:*:*",
"matchCriteriaId": "DA5A6D13-8765-418F-A2C5-6C0667732FD5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p17:*:*:*:*:*:*",
"matchCriteriaId": "F82F1F31-DF4F-48CE-A390-C1E81DC74A55",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p17d1:*:*:*:*:*:*",
"matchCriteriaId": "3F29F856-F26A-4423-B3CC-E525653B8358",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p18:*:*:*:*:*:*",
"matchCriteriaId": "5D717EFF-6F32-4454-B8EA-7CB5E7F0CB56",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p18d1:*:*:*:*:*:*",
"matchCriteriaId": "CD87E2B2-77EB-499A-B796-9EAA16AD9BDB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p19:*:*:*:*:*:*",
"matchCriteriaId": "DF8BE82D-2E54-4B93-B72F-8E6A3DE66276",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p2:*:*:*:*:*:*",
"matchCriteriaId": "DDDA828E-8DE6-4BFA-9CB4-DD22B3FD0495",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p3:*:*:*:*:*:*",
"matchCriteriaId": "0FECE5C3-29EC-469B-BB28-3DE79F97DA33",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p4:*:*:*:*:*:*",
"matchCriteriaId": "B5B2E220-8FA2-46AD-9507-705391C4A5E9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p5:*:*:*:*:*:*",
"matchCriteriaId": "2038E75E-4315-4C9F-B4C6-4A4440DCBA89",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p6:*:*:*:*:*:*",
"matchCriteriaId": "7C1ACB5D-2542-4476-917D-67D6E3199EDE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p7:*:*:*:*:*:*",
"matchCriteriaId": "6482EBD8-9245-4250-B70B-57402954C0B8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p7d4:*:*:*:*:*:*",
"matchCriteriaId": "4220A88C-C7C5-45E7-A65D-3DEDF8E20DD6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p7d5:*:*:*:*:*:*",
"matchCriteriaId": "32C5527E-BD58-4EC2-94AC-47713D853188",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p8:*:*:*:*:*:*",
"matchCriteriaId": "61EF3D56-3C92-43D5-9A55-E2579BA9393B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p9:*:*:*:*:*:*",
"matchCriteriaId": "B5220981-B4F6-4461-BEC4-6C304EA650A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:rc1:*:*:*:*:*:*",
"matchCriteriaId": "451A00C2-C3D8-4E31-90EC-4C64C909EDE9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:-:*:*:*:*:*:*",
"matchCriteriaId": "650A0A53-3E06-462E-B253-A2236655674A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p1:*:*:*:*:*:*",
"matchCriteriaId": "FA8870E4-737C-47D9-A98A-39CA02621485",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p10:*:*:*:*:*:*",
"matchCriteriaId": "7DC8D829-31E4-4E5A-9D3A-A885CB747FA6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p10d1:*:*:*:*:*:*",
"matchCriteriaId": "6F09EE60-FCA4-48F0-9566-ED3E227C93A8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p10d2:*:*:*:*:*:*",
"matchCriteriaId": "CFF170DA-5C3F-4AB1-88BF-A73E1BC5ADDD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p11:*:*:*:*:*:*",
"matchCriteriaId": "49AC1390-62EF-474C-AD4E-8355F4B1A6E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p11d2:*:*:*:*:*:*",
"matchCriteriaId": "19968722-E4B0-42C5-928B-ABE105051CDC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p11d3:*:*:*:*:*:*",
"matchCriteriaId": "980E5A7F-5522-4D28-8AFF-8FE9C52D7202",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p11d4:*:*:*:*:*:*",
"matchCriteriaId": "E199667A-AA9E-4BB4-9AFB-DF16C4D6B32D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p12:*:*:*:*:*:*",
"matchCriteriaId": "8A88905C-981D-489F-B975-FEB2D7FF274F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p12d1:*:*:*:*:*:*",
"matchCriteriaId": "D42CC18A-0885-4096-BCC0-966480E33529",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p12d4:*:*:*:*:*:*",
"matchCriteriaId": "BF47CC2A-D69C-45BE-8227-5AC47C7DA70D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p13:*:*:*:*:*:*",
"matchCriteriaId": "087C50D6-A0E4-409A-BF75-8674A8376DEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p13d1:*:*:*:*:*:*",
"matchCriteriaId": "D9FA3884-73E2-4769-8664-0FAA74E67A97",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p14:*:*:*:*:*:*",
"matchCriteriaId": "804D8E31-1AA8-45F0-BC13-D084ACBD36C9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p1d1:*:*:*:*:*:*",
"matchCriteriaId": "D6ECA350-78A1-46D2-ABC5-21BE759C0451",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p2:*:*:*:*:*:*",
"matchCriteriaId": "393CB94A-0259-4F1A-8676-7D45DA42D087",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p3:*:*:*:*:*:*",
"matchCriteriaId": "100D6FFD-C8CF-4DFC-8937-524DF4163BE1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p3d4:*:*:*:*:*:*",
"matchCriteriaId": "5E0C436E-A867-432F-A365-C8AC6F4078E5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p3d7:*:*:*:*:*:*",
"matchCriteriaId": "681076F9-BA01-4B12-8580-1F278E44A6DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p4:*:*:*:*:*:*",
"matchCriteriaId": "8F5A23F1-0214-47F3-B1CD-FF96EDB12E70",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p4d1:*:*:*:*:*:*",
"matchCriteriaId": "01D15AA1-E489-4615-A35B-D55DCED0E396",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p4d2:*:*:*:*:*:*",
"matchCriteriaId": "E4EE1B8A-FA25-4AEA-9B70-2FA3E84F22FC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p5:*:*:*:*:*:*",
"matchCriteriaId": "5C85EB21-2C14-42F1-8AA2-080E1A54C4C5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p5d2:*:*:*:*:*:*",
"matchCriteriaId": "E25697E1-A46A-4108-8980-9BD104A1D03A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p6:*:*:*:*:*:*",
"matchCriteriaId": "9383A766-B5C7-4429-803D-7EF2456C7FD5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p6d3:*:*:*:*:*:*",
"matchCriteriaId": "A65812C3-8F79-4358-8ADB-0A73AE9BBED4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p7:*:*:*:*:*:*",
"matchCriteriaId": "D3B4F568-853D-4E24-A66D-850C0C97B00B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p8:*:*:*:*:*:*",
"matchCriteriaId": "E42A32AA-A477-46CB-BEDE-F88773348228",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p8d3:*:*:*:*:*:*",
"matchCriteriaId": "656E3889-430A-4213-90DB-9584AC43513F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p9:*:*:*:*:*:*",
"matchCriteriaId": "F71AE03F-ADDF-4752-9CFE-EFE755DF47A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p9d3:*:*:*:*:*:*",
"matchCriteriaId": "1B73318B-6FCD-426D-A03F-CD8077238166",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p9d4:*:*:*:*:*:*",
"matchCriteriaId": "D10285BB-87A3-460A-9775-821D50194E6C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:p9d5:*:*:*:*:*:*",
"matchCriteriaId": "D6B39825-DEEE-464C-A348-1352FA2DC58B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.5:rc1:*:*:*:*:*:*",
"matchCriteriaId": "028998CC-748B-4F61-9A31-8D6A14D0FD99",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:-:*:*:*:*:*:*",
"matchCriteriaId": "2A19471C-8EA3-432E-8872-DD50E915BF4D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:d2:*:*:*:*:*:*",
"matchCriteriaId": "05F2FA4B-1836-49B1-823B-DF12DF284F4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p1:*:*:*:*:*:*",
"matchCriteriaId": "8A31063B-73C9-4DB6-8997-9A6163B4F220",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p2:*:*:*:*:*:*",
"matchCriteriaId": "EEE9516C-352C-45AB-BC60-51E2FD6A275F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p2d1:*:*:*:*:*:*",
"matchCriteriaId": "3272F487-02C3-423E-9217-8F45D8FCB9BB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p3:*:*:*:*:*:*",
"matchCriteriaId": "CFA7F311-A64E-4301-B5E3-7AC72C4523DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p3d12:*:*:*:*:*:*",
"matchCriteriaId": "E3BB251A-B5D7-45B7-9F2E-DE1415A31849",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p3d5:*:*:*:*:*:*",
"matchCriteriaId": "7180FE52-E5EE-477A-ADA8-6DB87D53CD31",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p3d6:*:*:*:*:*:*",
"matchCriteriaId": "855DDDA8-6B34-4C3F-91CB-E550A647817C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p4:*:*:*:*:*:*",
"matchCriteriaId": "1B0C2B0A-5135-4E95-9FD1-132BD678EAE1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p4d1:*:*:*:*:*:*",
"matchCriteriaId": "05F70CC3-A6DF-4111-880C-5C66661F6C7A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p4d3:*:*:*:*:*:*",
"matchCriteriaId": "687F921B-A487-4DF0-8009-ECB103C1ACFB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p5:*:*:*:*:*:*",
"matchCriteriaId": "F6E0890A-B571-4DD8-BD2C-40CF0DF3F35B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p5d5:*:*:*:*:*:*",
"matchCriteriaId": "49CA405E-8B4A-4D0D-9FD1-30B7FFF7DAFE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p5d6:*:*:*:*:*:*",
"matchCriteriaId": "4FC3F506-D716-41D6-92EF-E51AEE32FDEC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p5d8:*:*:*:*:*:*",
"matchCriteriaId": "270208C0-4FBF-418B-89D3-45B940008C6E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p6:*:*:*:*:*:*",
"matchCriteriaId": "15A4063B-438C-4360-83CA-5266647FE89F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p6d1:*:*:*:*:*:*",
"matchCriteriaId": "EEB6CD36-C432-49C8-B348-D797D8C4B814",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p6d2:*:*:*:*:*:*",
"matchCriteriaId": "57DD935E-229A-4738-B3B1-E7AD97AD2B3C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p6d3:*:*:*:*:*:*",
"matchCriteriaId": "45BA38D3-6BA0-4DA2-B5CE-ACE9C0D6A50D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p6d6:*:*:*:*:*:*",
"matchCriteriaId": "650A25BC-29E4-4256-90D6-278047DEF6FA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p6d7:*:*:*:*:*:*",
"matchCriteriaId": "85677517-8DED-49CF-B81E-4A3450FEBC4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p7:*:*:*:*:*:*",
"matchCriteriaId": "CC14B658-EBCE-488D-8447-50D3486C055A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p7d1:*:*:*:*:*:*",
"matchCriteriaId": "9FE5E206-73D7-4F56-AADC-ED7CD6A2D8E9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p8:*:*:*:*:*:*",
"matchCriteriaId": "D4B62C56-2000-4FF5-9E5C-C42CDE43E16F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p8d1:*:*:*:*:*:*",
"matchCriteriaId": "19947C60-EA38-42C4-910D-3F943AC37149",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:p9:*:*:*:*:*:*",
"matchCriteriaId": "9C36304A-E078-4368-B5B2-59E53EF830BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:rc1:*:*:*:*:*:*",
"matchCriteriaId": "96E33A03-6F4D-4370-AB1A-AFC68185B810",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.6:rc2:*:*:*:*:*:*",
"matchCriteriaId": "2D1629D6-02D4-4A7E-9B9C-5DE152AEE7E4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.7:rc1:*:*:*:*:*:*",
"matchCriteriaId": "F3F82BA2-EDE2-4D6B-B5D8-486745341B5C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*",
"matchCriteriaId": "DF395854-EAAB-482C-87B3-7F15E318F36C",
"versionEndIncluding": "9.3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Clustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data or disclosure of sensitive information."
},
{
"lang": "es",
"value": "Las versiones de Clustered Data ONTAP anteriores a 9.3P19, 9.5P14, 9.6P9 y 9.7, son susceptibles a una vulnerabilidad que, cuando se explota con \u00e9xito, podr\u00eda conllevar a una adici\u00f3n o modificaci\u00f3n de datos o a una divulgaci\u00f3n de informaci\u00f3n confidencial"
}
],
"id": "CVE-2020-8576",
"lastModified": "2026-06-17T03:26:34.973",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.0,
"impactScore": 4.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2020-09-02T20:15:11.377",
"references": [
{
"source": "security-alert@netapp.com",
"tags": [
"Vendor Advisory"
],
"url": "https://security.netapp.com/advisory/NTAP-20200902-0001/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://security.netapp.com/advisory/NTAP-20200902-0001/"
}
],
"sourceIdentifier": "security-alert@netapp.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…