PT-2020-8677 · Hitachi · Hitachi Device Manager+3

Piotr Madej · Published 2020-02-14 · Updated 2020-02-27 · CVE-2018-21032

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:N

Name of the Vulnerable Software and Affected Versions Hitachi Command Suite versions prior to 8.7.1-00 Hitachi Automation Director versions prior to 8.5.0-00

Description A vulnerability allows authenticated remote users to expose technical information through error messages. This issue affects products including Hitachi Device Manager and Hitachi Compute Systems Manager.

Recommendations For Hitachi Command Suite versions prior to 8.7.1-00, update to version 8.7.1-00 or later. For Hitachi Automation Director versions prior to 8.5.0-00, update to version 8.5.0-00 or later.

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2018-21032

Affected Products

Hitachi Automation Director

Hitachi Command Suite

Hitachi Compute Systems Manager

Hitachi Device Manager

References · 4

• https://hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-128 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-21032 · Vendor Advisory
• http://hitachi.co.jp/Prod/comp/soft1/global/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-21032 · Security Note