Cross-Site WebSocket Hijacking Vulnerability in Hitachi Ops Center Analyzer

CVE-2024-8201

What is CVE-2024-8201?

A cross-site WebSocket hijacking vulnerability has been identified in the Hitachi Ops Center Analyzer, specifically in its RAID Agent component. This vulnerability allows an attacker to impersonate a user and manipulate WebSocket connections, potentially leading to unauthorized access or control over the affected application. The issue is present in versions of Hitachi Ops Center Analyzer ranging from 10.8.0-00 to 11.0.4-00 and from 10.9.0-00 to 11.0.4-00. Users are urged to implement patches and updates as provided by the vendor to mitigate this risk.

References