Lucene search

K
nvd[email protected]NVD:CVE-2022-4041
HistoryJan 31, 2023 - 2:15 a.m.

CVE-2022-4041

2023-01-3102:15:08
CWE-266
CWE-287
CWE-269
web.nvd.nist.gov
cve-2022-4041
hitachi
vmware vcenter
privilege escalation

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.8%

Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation.
This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.8.0 before 04.9.1.

Affected configurations

NVD
Node
hitachistorage_plug-inMatch04.8.0vmware_vcenter
OR
hitachistorage_plug-inMatch04.9.0vmware_vcenter

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.8%

Related for NVD:CVE-2022-4041