PT-2017-18827
CVE-2017-9295
·
Published
2017-05-29
·
Updated
2017-06-08
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Hitachi Device Manager versions prior to 8.5.2-01
Hitachi Replication Manager versions prior to 8.5.2-00
Description
The issue allows authenticated remote users to read arbitrary files due to an XXE vulnerability.
Recommendations
For Hitachi Device Manager versions prior to 8.5.2-01, update to version 8.5.2-01 or later.
For Hitachi Replication Manager versions prior to 8.5.2-00, update to version 8.5.2-00 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾