CVE-2018-14735

An Information Exposure issue was discovered in Hitachi Command Suite 8.5.3. A remote attacker may be able to exploit a flaw in the permission of messaging that may allow for information exposure via a crafted message.

CVSS v3 7.5 HIGH
CVSS v2.0 5.0 MEDIUM

7.5^/10

CVSS v3 : HIGH

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2018-123/	Vendor Advisory
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2018-123/	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:hitachi:compute_systems_manager::::::::
	cpe:2.3:a:hitachi:device_manager::::::::
	cpe:2.3:a:hitachi:replication_manager::::::::
	cpe:2.3:a:hitachi:tiered_storage_manager::::::::
	cpe:2.3:a:hitachi:tuning_manager::::::::

OR	cpe:2.3:o:linux:linux_kernel:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

Configuration 2 (hide)

cpe:2.3:a:hitachi:command_suite:8.5.3:*:*:*:*:*:*:*

History

21 Nov 2024, 03:49

Type	Values Removed	Values Added
References	~~() http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2018-123/ - Vendor Advisory~~	() http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2018-123/ - Vendor Advisory

Information

Published : 2018-08-09 20:29

Updated : 2024-11-21 03:49

NVD link : CVE-2018-14735

Mitre link : CVE-2018-14735

CVE.ORG link : CVE-2018-14735

JSON object : View

Products Affected

hitachi

replication_manager
compute_systems_manager
tuning_manager
tiered_storage_manager
command_suite
device_manager

linux

linux_kernel

microsoft

windows

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2018-14735", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-08-09T20:29:00.427", "references": [{"url": "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2018-123/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2018-123/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "An Information Exposure issue was discovered in Hitachi Command Suite 8.5.3. A remote attacker may be able to exploit a flaw in the permission of messaging that may allow for information exposure via a crafted message."}, {"lang": "es", "value": "Se ha descubierto un problema de exposici\u00f3n de informaci\u00f3n en Hitachi Command Suite 8.5.3. Un atacante remoto podr\u00eda ser capaz de explotar un error en el permiso de mensajer\u00eda que podr\u00eda permitir la exposici\u00f3n de informaci\u00f3n mediante un mensaje manipulado."}], "lastModified": "2024-11-21T03:49:42.203", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hitachi:compute_systems_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B7BA4F4-4ACC-4602-A3D7-B52153667101", "versionEndExcluding": "8.6.0-02"}, {"criteria": "cpe:2.3:a:hitachi:device_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BAA63C3B-A8C1-4DB1-8D7A-5E26E5ED9711", "versionEndExcluding": "8.6.1-02", "versionStartIncluding": "7.0.0-00"}, {"criteria": "cpe:2.3:a:hitachi:replication_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1ADA8240-2C43-4502-BB93-3F2EB7743282", "versionEndExcluding": "8.6.1-02", "versionStartIncluding": "7.0.0-00"}, {"criteria": "cpe:2.3:a:hitachi:tiered_storage_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A321B86A-36B2-49D1-980A-3AF808EE8B22", "versionEndExcluding": "8.6.1-02", "versionStartIncluding": "7.0.0-00"}, {"criteria": "cpe:2.3:a:hitachi:tuning_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0157D1D0-7240-4FE4-8CF6-290266586442", "versionEndExcluding": "8.6.1-02", "versionStartIncluding": "7.0.0-00"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hitachi:command_suite:8.5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "29135EB6-322D-4ABB-9AB0-18A9224AED8D"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}