CVE-2018-21026

CVE-2018-21026 affects Hitachi Command Suite 7.x and 8.x up to but not including 8.6.5-00. An unauthenticated remote user can read internal information. The vulnerability is documented across multiple sources (NVD, RH, JVN, CNVD) with the impact described as information disclosure. Mitigation per...

CVE-2020-36695

CVE-2020-36695 is a File/Directory Permissions vulnerability in Hitachi Command Suite components on Linux caused by incorrect default permissions in the Device Manager Server component, Hitachi Tuning Manager server, and related agents, enabling file manipulation. Affected versions: Hitachi Devic...

CVE-2020-36611

CVE-2020-36611 describes an Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Linux, affecting the Hitachi Tuning Manager server and its agents for RAID, NAS, and SAN Switch components. The issue allows local users to read and write specific files due to default permission ...

CVE-2019-17360

CVE-2019-17360 affects Hitachi Command Suite 7.x and 8.x prior to 8.7.0-00. unauthenticated remote users can trigger a denial-of-service due to Uncontrolled Resource Consumption. Multiple sources (NVD, Red Hat entry, CVE records) confirm the affected product family and vulnerable condition; no ex...

CVE-2014-4188

Hitachi Tuning Manager (and JP1/Performance Management - Manager Web Option 07-00 to 07-54) is affected by a CSRF vulnerability that can allow remote attackers to hijack the authentication of unspecified victims. Vectors are not detailed in the provided documents. Affected versions are Hitachi Tu...

CVE-2018-21033

The CVE-2018-21033 vulnerability affects Hitachi Command Suite (and related products) prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00, and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00. The issue allows authenticated remote users to load an arbitrary CSS token sequen...

CVE-2023-6457

CVE-2023-6457 concerns Hitachi Tuning Manager for Windows. The server component has incorrect default permissions prior to 8.8.5-04, allowing local users to read and write specific files. Upgrading to version 8.8.5-04 or later is the recommended remediation; as a temporary measure, restrict acces...

CVE-2014-4189

Hitachi Tuning Manager and JP1/Performance Management - Manager Web Option contain a cross-site scripting (XSS) vulnerability (CVE-2014-4189). The flaw affects Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04, and JP1/Performance Management - Manager Web Option 07-00 through 07-54. ...

CVE-2018-14735

CVE-2018-14735 applies to Hitachi Command Suite 8.5.3. An Information Disclosure vulnerability exists due to a flaw in messaging permissions, allowing a remote attacker to obtain information via a specially crafted message. Connected documents corroborate the same vulnerability description across...

CVE-2024-5828

CVE-2024-5828 is a hitachi Tuning Manager EL (Expression Language) Injection vulnerability. Affects Hitachi Tuning Manager before version 8.8.7-00 on Windows, Linux, and Solaris. Root cause: improper handling of the expression language that enables code injection. Impact is high: allows arbitrary...