CVE-2020-3389— Cisco Hyperflex HX-Series Software安装模块加密问题漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2020-3389の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Cisco Hyperflex HX-Series Software Weak Storage Vulnerability
ソース: CVE Program / CVE List V5
脆弱性説明
A vulnerability in the installation component of Cisco Hyperflex HX-Series Software could allow an authenticated, local attacker to retrieve the password that was configured at installation on an affected device. The vulnerability exists because sensitive information is stored as clear text. An attacker could exploit this vulnerability by authenticating to an affected device and navigating to the directory that contains sensitive information. A successful exploit could allow the attacker to obtain sensitive information in clear text from the affected device.
ソース: CVE Program / CVE List V5
CVSS情報
N/A
ソース: CVE Program / CVE List V5
脆弱性タイプ
加密问题
ソース: CVE Program / CVE List V5
脆弱性タイトル
Cisco Hyperflex HX-Series Software安装模块加密问题漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Cisco HyperFlex Software是美国思科（Cisco）公司的一套套可扩展的分布式文件系统。该系统通过云管理提供统一的计算、存储和网络，并提供企业级数据管理和优化服务。 Cisco Hyperflex HX-Series Software 4.0(2a)及之前版本中的安装组件存在加密问题漏洞，该漏洞源于程序将敏感信息存储为明文形式。本地攻击者可向设备进行身份验证并导航到带有敏感信息的路径利用该漏洞获取敏感信息。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Cisco | Cisco HyperFlex HX Data Platform | n/a | - |
II. CVE-2020-3389の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2020-3389のインテリジェンス情報
请登录查看更多情报信息。
CVE-2020-3389 厂商安全公告 (1)
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-HYP-WSV-yT3j5hSBvendor-advisoryx_refsource_CISCO
Same Patch Batch · Cisco · 2020-08-26 · 22 CVEs total
| CVE-2020-3443 | 8.8 HIGH | Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability |
| CVE-2020-3507 | 8.8 HIGH | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execu |
| CVE-2020-3506 | 8.8 HIGH | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execu |
| CVE-2020-3523 | 6.5 MEDIUM | Cisco Data Center Network Manager Cross-Site Scripting Vulnerability |
| CVE-2020-3518 | 6.5 MEDIUM | Cisco Data Center Network Manager Cross-Site Scripting Vulnerability |
| CVE-2020-3505 | 6.5 MEDIUM | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Memory Leak Vulne |
| CVE-2020-3522 | 6.3 MEDIUM | Cisco Data Center Network Manager Authorization Bypass Vulnerability |
| CVE-2020-3485 | 6.3 MEDIUM | Cisco Vision Dynamic Signage Director Role-Based Access Control Vulnerability |
| CVE-2020-3491 | 5.5 MEDIUM | Cisco Vision Dynamic Signage Director Stored Cross-Site Scripting Vulnerability |
| CVE-2020-3520 | 5.5 MEDIUM | Cisco Data Center Network Manager Information Disclosure Vulnerability |
| CVE-2020-3484 | 5.3 MEDIUM | Cisco Vision Dynamic Signage Director Directory Traversal Information Disclosure Vulnerabi |
| CVE-2020-3521 | 5.3 MEDIUM | Cisco Data Center Network Manager Read File Path Traversal Vulnerability |
| CVE-2020-3490 | 4.9 MEDIUM | Cisco Vision Dynamic Signage Director Path Traversal Vulnerability |
| CVE-2020-3151 | Cisco Connected Mobile Experiences Restricted Shell Escape Vulnerability | |
| CVE-2020-3496 | Cisco Small Business Smart and Managed Switches Denial of Service Vulnerability | |
| CVE-2020-3466 | Cisco DNA Center Cross-Site Scripting Vulnerabilities | |
| CVE-2020-3446 | Cisco vWAAS for Cisco ENCS 5400-W Series and CSP 5000-W Series Default Credentials Vulnera | |
| CVE-2020-3519 | Cisco Data Center Network Manager Path Traversal Vulnerability | |
| CVE-2020-3440 | Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite Vulnerability | |
| CVE-2020-3439 | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability |
Showing 20 of 22 CVEs. View all on vendor page →
IV. 関連脆弱性
- CVE-2023-20263
Cisco HyperFlex HX Data Platform 输入验证错误漏洞 - CVE-2021-1499
Cisco HyperFlex HX Data Platform File Upload Vulnerability - CVE-2021-1498
Cisco HyperFlex HX Command Injection Vulnerabilities - CVE-2021-1497
Cisco HyperFlex HX Command Injection Vulnerabilities - CVE-2018-15429
Cisco HyperFlex HX Data Platform Software Unauthorized Direc
同じベンダー: Cisco
- CVE-2026-20349
Cisco Secure Firewall Adaptive Security Appliance and Secure - CVE-2026-20348
ClamAV XAR File Format Processing Memory Corruption Vulnerab - CVE-2026-20345
ClamAV GPT File Format Processing Memory Corruption Vulnerab - CVE-2026-20339
ClamAV PESpin File Format Processing Integer Overflow Vulner - CVE-2026-20347
ClamAV Mach-O File Format Processing Memory Corruption Vulne
同じ弱点: CWE-310
- CVE-2026-17616
Security vulnerabilities have been found in IBM Verify Ident - CVE-2026-49000
Cryptography Implementation Flaw vulnerability in ZTE ZXUniP - CVE-2025-21482
Cryptographic Issues in Core - CVE-2025-48823
Windows Cryptographic Services Information Disclosure Vulner - CVE-2025-21422
Cryptographic Issues in Automotive
V. CVE-2020-3389へのコメント
まだコメントはありません