CVE-2024-10205: critical vulnerability in Hitachi Infrastructure Analytics Advisor
Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer
Published
Follow this CVE+ Monitor Hitachi Ops Center Analyzer+ Monitor Hitachi Infrastructure Analytics Advisor
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.4epss 0.8%
Authentication Bypass
vulnerability in Hitachi Ops Center Analyzer on Linux, 64 bit (Hitachi Ops Center Analyzer detail view component), Hitachi Infrastructure Analytics Advisor on Linux, 64 bit (Hitachi Data Center Analytics
component
).This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.3-00; Hitachi Infrastructure Analytics Advisor: from 2.1.0-00 through 4.4.0-00.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Affected products
Hitachi · Hitachi Infrastructure Analytics AdvisorHitachi · Hitachi Ops Center AnalyzerRelated CVEs — Hitachi Infrastructure Analytics Advisor
In the same product, most dangerous first.
CVE-2022-41552CRITICALServer-Side Request Forgery Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center AnalyzerEPSS 0.8%CVE-2023-30469HIGHReflrected Cross Site Scripting Vulnerability in Hitachi Ops Center AnalyzerEPSS 0.4%CVE-2024-2493HIGHSession Hijacking Vulnerability in Hitachi Ops Center AnalyzerEPSS 0.3%CVE-2022-4895HIGHMan-in-the-middle attack Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center AnalyzerEPSS 0.3%CVE-2025-3624MEDIUMMissing Authorization Vulnerability in Hitachi Ops Center AnalyzerEPSS 0.2%CVE-2025-66445HIGHAuthorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center AnalyzerEPSS 0.2%