5.2

CVE-2025-5781

Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hitachi ≫ Configuration Manager SwEditionenglish Version >= 8.5.1-00
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
Hitachi ≫ Configuration Manager SwEditionjapanese Version >= 8.5.1-00 < 11.0.5-00
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
Hitachi ≫ Device Manager Version >= 8.4.1-00 < 8.6.5-00
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
Hitachi ≫ Ops Center Api Configuration Manager SwEditionenglish Version >= 10.0.0-00 < 11.0.5-00
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.045
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.2 2 2.7
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
hirt@hitachi.co.jp 5.2 2 2.7
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CWE-532 Insertion of Sensitive Information into Log File

The product writes sensitive information to a log file.