Lucene search

[email protected]NVD:CVE-2022-41553

HistoryNov 01, 2022 - 3:15 a.m.

CVE-2022-41553

2022-11-0103:15:10

CWE-532

[email protected]

web.nvd.nist.gov

hitachi

infrastructure analytics advisor

ops center analyzer

linux

sensitive information

temporary file

vulnerability

local users

cve-2022-41553

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%

JSON

Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer probe component) allows local users to gain sensitive information.
This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00.

Affected configurations

NVD

Node

hitachiinfrastructure_analytics_advisorRange2.0.0-00–4.4.0-00

AND

linuxlinux_kernelMatch-x64

Node

hitachiops_center_analyzerRange10.0.0-00–10.9.0-00

AND

linuxlinux_kernelMatch-x64

References

www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-134/index.html

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2022-41553

prion1 cve1 cvelist1