PT-2023-3689 · Hitachi · Hitachi Device Manager
CVE-2023-34142
·
Publicado
2023-05-26
·
Atualizado
2023-07-27
CVSS v3.1
9.0
Crítica
| Vetor | AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Hitachi Device Manager versions prior to 8.8.5-02
Description
The issue is related to the cleartext transmission of sensitive information in Hitachi Device Manager, affecting components such as Device Manager Server, Device Manager Agent, and Host Data Collector. This allows for interception, potentially enabling unauthorized access to protected information.
Recommendations
For versions prior to 8.8.5-02, update to version 8.8.5-02 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information and implementing additional security measures to minimize the risk of interception.
Correção
Cleartext Transmission of Sensitive Information
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Hitachi Device Manager