PT-2012-2951 · Hitachi · Hitachi It Operations Director

Published 2012-01-24 · Updated 2017-08-29 · CVE-2012-0919

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Hitachi IT Operations Director versions 02-50-01 through 02-50-07 Hitachi IT Operations Director versions 03-00 through 03-00-04 Hitachi IT Operations Director versions prior to 03-00-06

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could potentially lead to unauthorized access or control of user sessions.

Recommendations For versions 02-50-01 through 02-50-07, update to version 03-00-06 or later. For versions 03-00 through 03-00-04, update to version 03-00-06 or later. For versions prior to 03-00-06, update to version 03-00-06 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2012-0919

Affected Products

Hitachi It Operations Director

References · 6

• http://hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-001/index.html · Vendor Advisory
• http://secunia.com/advisories/47490 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0919 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72248 · Note
• http://securityfocus.com/bid/51340 · Note
• http://osvdb.org/78215 · Note