Lucene search

K
nvd[email protected]NVD:CVE-2022-4441
HistoryJan 31, 2023 - 2:15 a.m.

CVE-2022-4441

2023-01-3102:15:08
CWE-266
CWE-287
CWE-269
web.nvd.nist.gov
hitachi storage plug-in
vmware vcenter
privilege assignment
vulnerability
remote authentication
privilege escalation
cve-2022-4441

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.8%

Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation.
This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.9.0 before 04.9.1.

Affected configurations

NVD
Node
hitachistorage_plug-inMatch04.8.0vmware_vcenter
OR
hitachistorage_plug-inMatch04.9.0vmware_vcenter

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.8%

Related for NVD:CVE-2022-4441