PT-2026-21864 · Hitachi · Hitachi Configuration Manager+1

Published 2026-02-25 · Updated 2026-02-25 · CVE-2025-0976

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hitachi Ops Center API Configuration Manager versions 10.0.0-00 through 11.0.3-00 Hitachi Configuration Manager versions 8.6.1-00 through 11.0.4-00

Description An information exposure issue exists in Hitachi Ops Center API Configuration Manager and Hitachi Configuration Manager. The issue could lead to unauthorized disclosure of information. The API endpoints and vulnerable parameters are not specified.

Recommendations Update Hitachi Ops Center API Configuration Manager to version 11.0.4-00 or later. Update Hitachi Configuration Manager to version 11.0.5-00 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2025-0976

Affected Products

Hitachi Configuration Manager

Hitachi Ops Center Api Configuration Manager

References · 6

• https://hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-110/index.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0976 · Security Note
• https://osv.dev/vulnerability/CVE-2025-0976 · Vendor Advisory
• https://t.me/CVEtracker/45692 · Telegram Post
• https://t.me/cveNotify/153101 · Telegram Post
• https://twitter.com/CVEnew/status/2026641341359309272 · Twitter Post