PT-2024-1506

Name of the Vulnerable Software and Affected Versions Hitachi Storage Plug-in for VMware vCenter versions 04.0.0 through 04.9.2 Description The issue is related to incorrect default permissions, allowing local users to read and write specific files. This can potentially enable an attacker to acce...

CVE-2024-21840: Incorrect Default Permissions

Incorrect Default Permissions vulnerability in Hitachi Storage Plug-in for VMware vCenter allows local users to read and write specific files. This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.0.0 through 04.9.2...

CVE-2022-4441: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation. This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.9.0 before 04.9.1...

CVE-2022-4041: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation. This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.8.0 before 04.9.1...

CVE-2022-2637: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Hitachi Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation.This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.8.0 before 04.9.0...

CVE-2015-4057: Exposure of Sensitive Information to an Unauthorized Actor

The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover the admin user password by sniffing the network...

PT-2017-6726

Name of the Vulnerable Software and Affected Versions VCE Vision Intelligent Operations versions prior to 2.6.5 Description The issue allows remote attackers to discover the admin user password by sniffing the network, due to the "Plug-in for VMware vCenter" sending a cleartext HTTP response upon...