PT-2026-21831 · Hitachi · Hitachi Device Manager+2

Publicado 2026-02-25 · Atualizado 2026-02-25 · CVE-2025-5781

Positive Technologies (AI Summary)

CVSS v3.1

5.2

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Hitachi Ops Center API Configuration Manager versions 10.0.0-00 through 10.0.0-00 before 11.0.5-00 Hitachi Configuration Manager versions 8.5.1-00 through 8.5.1-00 before 11.0.5-00 Hitachi Device Manager versions 8.4.1-00 through 8.4.1-00 before 8.6.5-00

Description An information exposure issue exists that could allow for session hijacking in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, and Hitachi Device Manager. The issue allows an attacker to potentially compromise user sessions.

Recommendations Update Hitachi Ops Center API Configuration Manager to version 11.0.5-00 or later. Update Hitachi Configuration Manager to version 11.0.5-00 or later. Update Hitachi Device Manager to version 8.6.5-00 or later.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

CVE-2025-5781

Produtos afetados

Hitachi Configuration Manager

Hitachi Device Manager

Hitachi Ops Center Api Configuration Manager

Referências · 5

• https://t.me/cveNotify/153084 · Publicação no Telegram
• https://hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-111/index.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-5781 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2026641362553053596 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-5781 · Nota de Segurança