PT-2013-5141 · Hitachi · Hitachi Job Management Partner 1/It Desktop Management - Manager+2

Taizo Tsukamoto · Published 2013-07-31 · Updated 2013-07-31 · CVE-2013-4697

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hitachi JP1/IT Desktop Management - Manager versions 09-50 through 09-50-03 Hitachi JP1/IT Desktop Management - Manager versions 09-51 through 09-51-05 Hitachi JP1/IT Desktop Management - Manager versions 10-00 through 10-00-02 Hitachi JP1/IT Desktop Management - Manager versions 10-01 through 10-01-02 Hitachi Job Management Partner 1/IT Desktop Management - Manager versions 09-50 through 09-50-03 Hitachi Job Management Partner 1/IT Desktop Management - Manager versions 10-01 Hitachi IT Operations Director versions 02-50 through 02-50-07 Hitachi IT Operations Director versions 03-00 through 03-00-12 Hitachi IT Operations Director versions 04-00 through 04-00-01

Description The issue allows remote authenticated users to gain privileges via unknown vectors.

Recommendations For Hitachi JP1/IT Desktop Management - Manager versions 09-50 through 09-50-03, update to a version outside of the affected range. For Hitachi JP1/IT Desktop Management - Manager versions 09-51 through 09-51-05, update to a version outside of the affected range. For Hitachi JP1/IT Desktop Management - Manager versions 10-00 through 10-00-02, update to a version outside of the affected range. For Hitachi JP1/IT Desktop Management - Manager versions 10-01 through 10-01-02, update to a version outside of the affected range. For Hitachi Job Management Partner 1/IT Desktop Management - Manager versions 09-50 through 09-50-03, update to a version outside of the affected range. For Hitachi Job Management Partner 1/IT Desktop Management - Manager versions 10-01, update to a version outside of the affected range. For Hitachi IT Operations Director versions 02-50 through 02-50-07, update to a version outside of the affected range. For Hitachi IT Operations Director versions 03-00 through 03-00-12, update to a version outside of the affected range. For Hitachi IT Operations Director versions 04-00 through 04-00-01, update to a version outside of the affected range.

Fix

Related Identifiers

CVE-2013-4697

Affected Products

Hitachi It Operations Director

Hitachi Jp1/It Desktop Management - Manager

Hitachi Job Management Partner 1/It Desktop Management - Manager

References · 4

• http://hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-017/index.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-4697 · Security Note
• http://jvn.jp/en/jp/JVN00065218/index.html · Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000076 · Note