Skip to content
OpenAdvisories
Medium WID-SEC-2023-0493 2 CVEs

Hitachi Ops Center: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published Feb 27, 2023 · Updated Feb 27, 2023 · de-DE

Vendor: Hitachi Product: Ops Center Common Services < 10.9.1-00 Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Hitachi Ops Center ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Hitachi Ops Center ist eine Softwarelösung für Rechenzentren zur Verwaltung, Optimierung, Orchestrierung und zum Schutz von Daten.

Vulnerabilities 2

  • Critical 9.8
    CVE-2022-31692 Public exploit

    Spring Security authorization rules can be bypassed via forward or include dispatcher types

    Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types. Specifically, an application is vulnerable when all of the following are true: The application expe…

    libspring-java org.springframework.security:spring-security-core Ubuntu Maven
  • High 8.1
    CVE-2022-31690

    spring-security-oauth2-client vulnerable to Privilege Escalation

    Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can modify a request initiated by the Client (via the br…

    libspring-java org.springframework.security:spring-security-oauth2-client Ubuntu Maven

Revision history

  1. #1

    Initiale Fassung

References