CVE-2020-8990

CRITICAL 9.1CVE-2020-8990 · Published 20/02/2020 · updated 17/06/2026

In short

CVE-2020-8990 is a CRITICAL (CVSS 9.1) vulnerability affecting ibi (western digital), my cloud home (western digital).
Chance of exploitation in the next 30 days (EPSS): 1.00%, higher than 62.7% of all vulnerabilities.
Fix: update to 3.6.0 or later.

Package	Affected versions	Patched versions
ibi western_digital	`< 3.6.0`	`3.6.0`
my cloud home western_digital	`< 3.6.0`	`3.6.0`

Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.