Lucene search

[email protected]CVE-2023-1995

HistoryAug 29, 2023 - 2:15 a.m.

CVE-2023-1995

2023-08-2902:15:07

NVD-CWE-Other

CWE-778

[email protected]

web.nvd.nist.gov

hitachi

hirdb server

logging

vulnerability

security

cve-2023-1995

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.0005 Low

EPSS

Percentile

16.9%

JSON

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23,

before 09-66-17,

before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before 10-06-02; HiRDB Server With Addtional Function: before 09-60-2M, before 09-65-/W

, before 09-66-/Q

; HiRDB Structured Data Access Facility: before 09-60-39, before 10-03-12, before 10-04-06, before 10-06-02.

CPENameOperatorVersion
hitachi:hirdb_server_with_additional_functionhitachi hirdb server with additional functionle09-00-2d
hitachi:hirdb_server_with_additional_functionhitachi hirdb server with additional functionle09-01-\/x
hitachi:hirdb_server_with_additional_functionhitachi hirdb server with additional functionle09-02-2f
hitachi:hirdb_server_with_additional_functionhitachi hirdb server with additional functionle09-03-2a
hitachi:hirdb_server_with_additional_functionhitachi hirdb server with additional functionle09-04-2s
hitachi:hirdb_server_with_additional_functionhitachi hirdb server with additional functionle09-50-2k
hitachi:hirdb_server_with_additional_functionhitachi hirdb server with additional functionle09-60-2k
hitachi:hirdb_server_with_additional_functionhitachi hirdb server with additional functionle09-65-\/v
hitachi:hirdb_server_with_additional_functionhitachi hirdb server with additional functionle09-66-\/p

CPE	Name	Operator	Version
hitachi:hirdb_server_with_additional_function	hitachi hirdb server with additional function	le	09-00-2d
hitachi:hirdb_server_with_additional_function	hitachi hirdb server with additional function	le	09-01-\/x
hitachi:hirdb_server_with_additional_function	hitachi hirdb server with additional function	le	09-02-2f
hitachi:hirdb_server_with_additional_function	hitachi hirdb server with additional function	le	09-03-2a
hitachi:hirdb_server_with_additional_function	hitachi hirdb server with additional function	le	09-04-2s
hitachi:hirdb_server_with_additional_function	hitachi hirdb server with additional function	le	09-50-2k
hitachi:hirdb_server_with_additional_function	hitachi hirdb server with additional function	le	09-60-2k
hitachi:hirdb_server_with_additional_function	hitachi hirdb server with additional function	le	09-65-\/v
hitachi:hirdb_server_with_additional_function	hitachi hirdb server with additional function	le	09-66-\/p

References

www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-133/index.html

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.0005 Low

EPSS

Percentile

16.9%

JSON

Related for CVE-2023-1995

prion1 cvelist1