CVE-2024-10205: falha crítica em Hitachi Infrastructure Analytics Advisor
Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer
Publicada em
Seguir esta CVE+ Monitorar Hitachi Ops Center Analyzer+ Monitorar Hitachi Infrastructure Analytics Advisor
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.4epss 0.8%
Authentication Bypass
vulnerability in Hitachi Ops Center Analyzer on Linux, 64 bit (Hitachi Ops Center Analyzer detail view component), Hitachi Infrastructure Analytics Advisor on Linux, 64 bit (Hitachi Data Center Analytics
component
).This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.3-00; Hitachi Infrastructure Analytics Advisor: from 2.1.0-00 through 4.4.0-00.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Produtos afetados
Hitachi · Hitachi Infrastructure Analytics AdvisorHitachi · Hitachi Ops Center AnalyzerCVEs relacionadas — Hitachi Infrastructure Analytics Advisor
No mesmo produto, das mais perigosas para as menos.
CVE-2022-41552CRITICALServer-Side Request Forgery Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center AnalyzerEPSS 0.8%CVE-2023-30469HIGHReflrected Cross Site Scripting Vulnerability in Hitachi Ops Center AnalyzerEPSS 0.4%CVE-2024-2493HIGHSession Hijacking Vulnerability in Hitachi Ops Center AnalyzerEPSS 0.3%CVE-2022-4895HIGHMan-in-the-middle attack Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center AnalyzerEPSS 0.3%CVE-2025-3624MEDIUMMissing Authorization Vulnerability in Hitachi Ops Center AnalyzerEPSS 0.2%CVE-2025-66445HIGHAuthorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center AnalyzerEPSS 0.2%