Lucene search

K
nvd[email protected]NVD:CVE-2024-21840
HistoryJan 30, 2024 - 3:15 a.m.

CVE-2024-21840

2024-01-3003:15:07
CWE-276
web.nvd.nist.gov
cve-2024-21840
incorrect default permissions
hitachi storage plug-in
vmware vcenter
local users
specific files
security vulnerability

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Incorrect Default Permissions vulnerability in Hitachi Storage Plug-in for VMware vCenter allowsΒ local users to read and write specific files.

This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.0.0 through 04.9.2.

Affected configurations

NVD
Node
hitachistorage_plug-inRange04.0.0–04.10.0vmware_vcenter

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for NVD:CVE-2024-21840