Server-Side Request Forgery Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer
CVE-2022-41552

9.8CRITICAL

Key Information:

Vendor

Hitachi
Status
Hitachi Infrastructure Analytics Advisor
Hitachi Ops Center Analyzer
Vendor
CVE Published:
1 November 2022

What is CVE-2022-41552?

Server-Side Request Forgery (SSRF) vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Data Center Analytics, Analytics probe components), Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe components) allows Server Side Request Forgery. This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00.

Affected Version(s)

Hitachi Infrastructure Analytics Advisor Linux 2.0.0-00 <= 4.4.0-00

Hitachi Ops Center Analyzer Linux 10.0.0-00 < 10.9.0-00

References

https://www.hitachi.com/products/it/software/security/inf...
vendor-advisory

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.