PT-2023-2004 · Hitachi · Hitachi Ops Center Analyzer

Published 2023-02-27 · Updated 2023-03-08 · CVE-2022-3884

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Hitachi Ops Center Analyzer versions 10.9.0-00 through 10.9.0-00

Description The issue is related to incorrect default permissions in the Hitachi Ops Center Analyzer RAID Agent component, allowing local users to read and write specific files.

Recommendations For versions 10.9.0-00, update to version 10.9.0-01 or later to resolve the issue.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

BDU:2023-01628

CVE-2022-3884

Affected Products

Hitachi Ops Center Analyzer

References · 7

• https://hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-105/index.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3884 · Security Note
• https://osv.dev/vulnerability/CVE-2022-3884 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01628 · Security Note
• https://t.me/cibsecurity/59082 · Telegram Post
• https://t.me/cvenotify/45810 · Telegram Post
• https://t.me/cvenotify/45135 · Telegram Post