Lucene search

K
nvd[email protected]NVD:CVE-2022-3884
HistoryFeb 28, 2023 - 3:15 a.m.

CVE-2022-3884

2023-02-2803:15:09
CWE-276
web.nvd.nist.gov
3
cve-2022-3884
incorrect default permissions
hitachi ops center analyzer
windows
vulnerability
local users
read
write
files

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

0

Percentile

5.1%

Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID Agent component) allows local users to read and write specific files.This issue affects Hitachi Ops Center Analyzer: from 10.9.0-00 before 10.9.0-01.

Affected configurations

Nvd
Node
hitachiops_center_analyzerRange10.9.0-0010.9.1-00
AND
microsoftwindowsMatch-x64
VendorProductVersionCPE
hitachiops_center_analyzer*cpe:2.3:a:hitachi:ops_center_analyzer:*:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:x64:*

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2022-3884