Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Advisor on Linux (Hitachi Infrastructure Analytics Advisor, Analytics probe server components), Hitachi Ops Center Automator on Linux, Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer, Analyzer probe server components), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files.
This issue affects Hitachi Automation Director:
from 8.2.0-00 through 10.6.1-00; Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.0.0-00; Hitachi Ops Center Automator: before 10.9.1-00; Hitachi Ops Center Analyzer: before 10.9.1-00; Hitachi Ops Center Viewpoint: before 10.9.1-00.
References
| Link | Resource |
|---|---|
| https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-106/index.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
07 Nov 2023, 03:22
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Advisor on Linux (Hitachi Infrastructure Analytics Advisor, Analytics probe server components), Hitachi Ops Center Automator on Linux, Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer, Analyzer probe server components), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files. This issue affects Hitachi Automation Director: from 8.2.0-00 through 10.6.1-00; Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.0.0-00; Hitachi Ops Center Automator: before 10.9.1-00; Hitachi Ops Center Analyzer: before 10.9.1-00; Hitachi Ops Center Viewpoint: before 10.9.1-00. |
13 Mar 2023, 16:08
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:a:hitachi:ops_center_analyzer:*:*:*:*:*:*:*:* cpe:2.3:a:hitachi:automation_director:*:*:*:*:*:*:*:* cpe:2.3:a:hitachi:ops_center_viewpoint:*:*:*:*:*:*:*:* cpe:2.3:a:hitachi:ops_center_automator:*:*:*:*:*:*:*:* cpe:2.3:a:hitachi:infrastructure_analytics_advisor:*:*:*:*:*:*:*:* |
|
| References | (MISC) https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-106/index.html - Vendor Advisory | |
| CWE | CWE-276 | |
| First Time |
Hitachi
Hitachi infrastructure Analytics Advisor Hitachi ops Center Automator Linux Linux linux Kernel Hitachi automation Director Hitachi ops Center Analyzer Hitachi ops Center Viewpoint |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
28 Feb 2023, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-02-28 03:15
Updated : 2023-12-10 14:48
NVD link : CVE-2020-36652
Mitre link : CVE-2020-36652
CVE.ORG link : CVE-2020-36652
JSON object : View
Products Affected
hitachi
- automation_director
- ops_center_viewpoint
- ops_center_automator
- ops_center_analyzer
- infrastructure_analytics_advisor
linux
- linux_kernel
CWE
CWE-276
Incorrect Default Permissions