PT-2014-5722
CVE-2014-4188
·
Published
2014-06-17
·
Updated
2015-09-02
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Hitachi Tuning Manager versions prior to 7.6.1-06
Hitachi Tuning Manager versions 8.x prior to 8.0.0-04
JP1/Performance Management - Manager Web Option versions 07-00 through 07-54
Description
A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of victims via unknown vectors.
Recommendations
For Hitachi Tuning Manager versions prior to 7.6.1-06, update to version 7.6.1-06 or later.
For Hitachi Tuning Manager versions 8.x prior to 8.0.0-04, update to version 8.0.0-04 or later.
For JP1/Performance Management - Manager Web Option versions 07-00 through 07-54, consider disabling web options or restricting access until an update is available.
Found an issue in the description? Have something to add? Feel free to write us 👾