by Kastro
Paper/Archive/CVE-2022-41552

CVE-2022-41552

Hitachi Hitachi Infrastructure Analytics Advisor — Server-Side Request Forgery Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer

EPSS 0.8%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (NVD, CNA agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 55.0.550 × 2011.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Server-Side Request Forgery (SSRF) vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Data Center Analytics, Analytics probe components), Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe components) allows Server Side Request Forgery. This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00.

Affected

ProductAffectedFixed inSource
Hitachi Infrastructure Analytics Advisor2.0.0-00 – 4.4.0-00–CNA
Hitachi Ops Center Analyzer10.0.0-00 – < 10.9.0-0010.9.0-00CNA

Scores by source

Hitachi (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisoryhitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-134/index.html