Hitachi Energy LinkOne product, has a vulnerability due to a web server misconfiguration, that enables debug mode and reveals the full path of the filesystem directory when an attacker generates errors during a query operation. This issue affects: Hitachi Energy LinkOne 3.20; 3.22; 3.23; 3.24; 3.25; 3.26.
References
| Link | Resource |
|---|---|
| https://search.abb.com/library/Download.aspx?DocumentID=8DBD000079&LanguageCode=en&DocumentPartId=&Action=Launch | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
09 Aug 2022, 00:50
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-209 |
03 Feb 2022, 17:24
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://search.abb.com/library/Download.aspx?DocumentID=8DBD000079&LanguageCode=en&DocumentPartId=&Action=Launch - Vendor Advisory | |
| CWE | CWE-287 | |
| CPE | cpe:2.3:a:hitachi:linkone:3.23:*:*:*:*:*:*:* cpe:2.3:a:hitachi:linkone:3.26:*:*:*:*:*:*:* cpe:2.3:a:hitachi:linkone:3.25:*:*:*:*:*:*:* cpe:2.3:a:hitachi:linkone:3.24:*:*:*:*:*:*:* cpe:2.3:a:hitachi:linkone:3.22:*:*:*:*:*:*:* cpe:2.3:a:hitachi:linkone:3.20:*:*:*:*:*:*:* |
|
| First Time |
Hitachi
Hitachi linkone |
|
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 5.3 |
28 Jan 2022, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-01-28 20:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-40338
Mitre link : CVE-2021-40338
CVE.ORG link : CVE-2021-40338
JSON object : View
Products Affected
hitachi
- linkone
CWE
CWE-209
Generation of Error Message Containing Sensitive Information