Hitachi Global Link Manager Injection Vulnerability Allows Code Injection
CVE-2024-0715

9.8CRITICAL

Key Information:

Vendor

Hitachi
Status
Hitachi Global Link Manager
Vendor
CVE Published:
20 February 2024

What is CVE-2024-0715?

An Expression Language Injection vulnerability has been identified in Hitachi Global Link Manager, which could pave the way for code injection attacks. The issue primarily affects installations on Windows platforms and is present in versions prior to 8.8.7-03. This vulnerability allows attackers to inject malicious code through exploited input, which may lead to unauthorized execution of harmful instructions in the affected system. Organizations using the software should prioritize applying relevant updates to mitigate associated risks.

Affected Version(s)

Hitachi Global Link Manager Windows 0 < 8.8.7-03

References

https://www.hitachi.com/products/it/software/security/inf...
vendor-advisory

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.