← All advisories

Critical severity9.1NVD Advisory· Published Feb 20, 2020· Updated Jun 17, 2026

CVE-2020-8990

CVE-2020-8990

Description

Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Westerndigital/ibi2 versions
cpe:2.3:a:western_digital:ibi:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:western_digital:ibi:*:*:*:*:*:*:*:*range: <3.6.0
- (no CPE)range: <3.6.0
Westerndigital/My Cloud Home2 versions
cpe:2.3:a:western_digital:my_cloud_home:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:western_digital:my_cloud_home:*:*:*:*:*:*:*:*range: <3.6.0
- (no CPE)range: <3.6.0
Western Digital/My Cloud Homedescription

Patches

Vulnerability mechanics

References

2

support.wdc.com/downloads.aspxnvdPatchVendor Advisory
www.westerndigital.com/support/productsecurity/wdc-19013-my-cloud-home-and-ibi-session-invalidation-vulnerabilitynvdVendor Advisory

News mentions

0

No linked articles in our index yet.