PT-2023-7100 · Hitachi · Hitachi Ops Center Administrator

CVE-2023-3335

·

Publicado

2023-10-02

·

Atualizado

2024-03-07

CVSS v3.1

6.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Hitachi Ops Center Administrator versions prior to 10.9.3-00
Description The issue is related to the insertion of sensitive information into log files, allowing local users to gain sensitive information. This is due to insufficient protection of registration data.
Recommendations For versions prior to 10.9.3-00, update to version 10.9.3-00 or later to resolve the issue. As a temporary workaround, consider restricting access to log files to minimize the risk of exploitation.

Correção

Insertion into Log File

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-08127
CVE-2023-3335

Produtos afetados

Hitachi Ops Center Administrator