Lucene search

HitachiCVE-2021-28052

HistorySep 26, 2022 - 4:15 p.m.

CVE-2021-28052

2022-09-2616:15:10

CWE-264

CWE-862

Hitachi

web.nvd.nist.gov

cve-2021-28052

hitachi content platform

hcp

unauthorized access

data security

vulnerability

nvd

hitachi vantara

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

A tenant administrator Hitachi Content Platform (HCP) may modify the configuration in another tenant without authorization, potentially allowing unauthorized access to data in the other tenant. Also, a tenant user (non-administrator) may view configuration in another tenant without authorization. This issue affects: Hitachi Vantara Hitachi Content Platform versions prior to 8.3.7; 9.0.0 versions prior to 9.2.3.

Affected configurations

Nvd

Node

hitachvantaraRange<8.3.7

hitachvantaraRange9.0.0–9.2.3

VendorProductVersionCPE
hitachvantara*cpe:2.3:a:hitach:vantara:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hitach	vantara	*	cpe:2.3:a:hitach:vantara::::::::

CNA Affected

[
  {
    "product": "Hitachi Content Platform",
    "vendor": "Hitachi Vantara",
    "versions": [
      {
        "lessThan": "8.3.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "9.2.3",
        "status": "affected",
        "version": "9.0.0",
        "versionType": "custom"
      }
    ]
  }
]

References

knowledge.hitachivantara.com/Security/HCP_Multitenancy_Vulnerability

www.hitachi.com/hirt/hitachi-sec/2021/604.html

Social References

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

Related for CVE-2021-28052