Paper/Archive/CVE-2024-10205

CVE-2024-10205

Hitachi Hitachi Ops Center Analyzer — Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer

EPSS 0.8%CVSS 9.4

critical.is priorityof 100

CVSS 9.4 (CNA)9.4 / 10 × 3028.2 Not in CISA KEV+300.0 EPSS percentile 55.9.559 × 2011.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Authentication Bypass vulnerability in Hitachi Ops Center Analyzer on Linux, 64 bit (Hitachi Ops Center Analyzer detail view component), Hitachi Infrastructure Analytics Advisor on Linux, 64 bit (Hitachi Data Center Analytics component ).This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.3-00; Hitachi Infrastructure Analytics Advisor: from 2.1.0-00 through 4.4.0-00.

Affected

ProductAffectedFixed inSource

Hitachi Ops Center Analyzer10.0.0-00 – < 11.0.3-0011.0.3-00CNA

Hitachi Infrastructure Analytics Advisor2.1.0-00 – 4.4.0-00–CNA

Scores by source

Hitachi (CNA)9.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

advisoryhitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-151/index.html