CVE-2025-5781: fallo de gravedad media en Hitachi Configuration Manager
Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.2epss 0.1%
Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Productos afectados
Hitachi · Hitachi Configuration ManagerHitachi · Hitachi Device ManagerHitachi · Hitachi Ops Center API Configuration ManagerCVEs relacionadas — Hitachi Configuration Manager
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-49106MEDIUMMissing Password Field Masking Vulnerability in Hitachi Device ManagerEPSS 0.4%CVE-2023-49107MEDIUMGeneration of Error Message Containing Sensitive Information Vulnerability in Hitachi Device ManagerEPSS 0.4%CVE-2023-34142CRITICALCleartext Transmission Vulnerability in Hitachi Device ManagerEPSS 0.3%CVE-2023-34143MEDIUMImproper Validation of Certificate Vulnerability in Hitachi Device ManagerEPSS 0.2%CVE-2025-0976MEDIUMInformation Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration ManagerEPSS 0.2%CVE-2024-5963MEDIUMAn unquoted executable path exists in Hitachi Device ManagerEPSS 0.2%