CVSS 3.1
9.1 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NCVE-2020-8990
Critical (9.1) in western digital. EPSS 1.0% chance of exploitation in the next 30 days.
Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
- CWE
- CWE-384
- Published
- Modified
- Record from
- the NVD, synced
Affected
- western_digital:ibi
- western_digital:my_cloud_home
References
- https://support.wdc.com/downloads.aspx?g=907&lang=en#downloads
- https://www.westerndigital.com/support/productsecurity/wdc-19013-my-cloud-home-and-ibi-session-invalidation-vulnerability
- https://support.wdc.com/downloads.aspx?g=907&lang=en#downloads
- https://www.westerndigital.com/support/productsecurity/wdc-19013-my-cloud-home-and-ibi-session-invalidation-vulnerability