Lucene search

[email protected]CVE-2022-34881

HistoryDec 06, 2022 - 2:15 a.m.

CVE-2022-34881

2022-12-0602:15:09

CWE-209

[email protected]

web.nvd.nist.gov

cve-2022-34881

hitachi

jp1

automatic operation

sensitive information disclosure

vulnerability

nvd

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Generation of Error Message Containing Sensitive Information vulnerability in Hitachi JP1/Automatic Operation allows local users to gain sensitive information.

This issue affects JP1/Automatic Operation: from 10-00 through 10-54-03, from 11-00 before 11-51-09, from 12-00 before 12-60-01.

Affected configurations

NVD

Node

hitachijp1\/automatic_operationRange10-00–10-00-02

hitachijp1\/automatic_operationRange10-10–10-10-01

hitachijp1\/automatic_operationRange10-12–10-12-05

hitachijp1\/automatic_operationRange10-13–10-13-04

hitachijp1\/automatic_operationRange10-52–10-52-05

hitachijp1\/automatic_operationRange10-53–10-53-03

hitachijp1\/automatic_operationRange10-54–10-54-03

hitachijp1\/automatic_operationRange11-00–11-00-05

hitachijp1\/automatic_operationRange11-01–11-01-03

hitachijp1\/automatic_operationRange11-02–11-02-01

hitachijp1\/automatic_operationRange11-10–11-10-07

hitachijp1\/automatic_operationRange11-11–11-11-05

hitachijp1\/automatic_operationRange11-12–11-12-04

hitachijp1\/automatic_operationRange11-51–11-51-08

hitachijp1\/automatic_operationRange12-00–12-00-01

hitachijp1\/automatic_operationRange12-01–12-01-02

hitachijp1\/automatic_operationRange12-10–12-10-02

hitachijp1\/automatic_operationRange12-50–12-50-01

hitachijp1\/automatic_operationMatch10-01

hitachijp1\/automatic_operationMatch10-02

hitachijp1\/automatic_operationMatch10-11

hitachijp1\/automatic_operationMatch10-50

hitachijp1\/automatic_operationMatch10-51

hitachijp1\/automatic_operationMatch11-50

hitachijp1\/automatic_operationMatch12-60

AND

microsoftwindowsMatch-

Node

hitachijp1\/automatic_operationRange10-52–10-52-05

hitachijp1\/automatic_operationRange10-53–10-53-03

hitachijp1\/automatic_operationRange10-54–10-54-03

hitachijp1\/automatic_operationRange11-00–11-00-05

hitachijp1\/automatic_operationRange11-01–11-01-03

hitachijp1\/automatic_operationRange11-02–11-02-01

hitachijp1\/automatic_operationRange11-10–11-10-06

hitachijp1\/automatic_operationRange11-11–11-11-04

hitachijp1\/automatic_operationRange11-12–11-12-03

hitachijp1\/automatic_operationRange11-51–11-51-08

hitachijp1\/automatic_operationRange12-00–12-00-01

hitachijp1\/automatic_operationRange12-01–12-01-02

hitachijp1\/automatic_operationRange12-10–12-10-02

hitachijp1\/automatic_operationRange12-50–12-50-01

hitachijp1\/automatic_operationMatch11-50

hitachijp1\/automatic_operationMatch12-60

AND

linuxlinux_kernelMatch-

CPENameOperatorVersion
hitachi:jp1\/automatic_operationhitachi jp1/automatic operationle10-00-02
hitachi:jp1\/automatic_operationhitachi jp1/automatic operationle10-10-01
hitachi:jp1\/automatic_operationhitachi jp1/automatic operationle10-12-05
hitachi:jp1\/automatic_operationhitachi jp1/automatic operationle10-13-04
hitachi:jp1\/automatic_operationhitachi jp1/automatic operationle10-52-05
hitachi:jp1\/automatic_operationhitachi jp1/automatic operationle10-53-03
hitachi:jp1\/automatic_operationhitachi jp1/automatic operationle10-54-03
hitachi:jp1\/automatic_operationhitachi jp1/automatic operationle11-00-05
hitachi:jp1\/automatic_operationhitachi jp1/automatic operationle11-01-03
hitachi:jp1\/automatic_operationhitachi jp1/automatic operationle11-02-01

CPE	Name	Operator	Version
hitachi:jp1\/automatic_operation	hitachi jp1/automatic operation	le	10-00-02
hitachi:jp1\/automatic_operation	hitachi jp1/automatic operation	le	10-10-01
hitachi:jp1\/automatic_operation	hitachi jp1/automatic operation	le	10-12-05
hitachi:jp1\/automatic_operation	hitachi jp1/automatic operation	le	10-13-04
hitachi:jp1\/automatic_operation	hitachi jp1/automatic operation	le	10-52-05
hitachi:jp1\/automatic_operation	hitachi jp1/automatic operation	le	10-53-03
hitachi:jp1\/automatic_operation	hitachi jp1/automatic operation	le	10-54-03
hitachi:jp1\/automatic_operation	hitachi jp1/automatic operation	le	11-00-05
hitachi:jp1\/automatic_operation	hitachi jp1/automatic operation	le	11-01-03
hitachi:jp1\/automatic_operation	hitachi jp1/automatic operation	le	11-02-01

Rows per page:

1-10 of 251

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "JP1/Automatic Operation",
    "vendor": "Hitachi",
    "versions": [
      {
        "lessThanOrEqual": "10-54-03",
        "status": "affected",
        "version": "10-00",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "11-51-09",
            "status": "unaffected"
          }
        ],
        "lessThan": "11-51-09",
        "status": "affected",
        "version": "11-00",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "12-60-01",
            "status": "unaffected"
          }
        ],
        "lessThan": "12-60-01",
        "status": "affected",
        "version": "12-00",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "JP1/Automatic Operation",
    "vendor": "Hitachi",
    "versions": [
      {
        "lessThanOrEqual": "10-54-03",
        "status": "affected",
        "version": "10-52",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "11-51-09",
            "status": "unaffected"
          }
        ],
        "lessThan": "11-51-09",
        "status": "affected",
        "version": "11-00",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "12-60-01",
            "status": "unaffected"
          }
        ],
        "lessThan": "12-60-01",
        "status": "affected",
        "version": "12-00",
        "versionType": "custom"
      }
    ]
  }
]

References

www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-140/index.html

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2022-34881

prion1 nvd1 cvelist1