Medium WID-SEC-2024-0236 1 CVE

Hitachi Storage: Schwachstelle ermöglicht Manipulation von Dateien

Published Jan 29, 2024 · Updated Jan 29, 2024 · de-DE

Vendor: Hitachi Product: Storage < 04.10.0 Plug-in for VMware vCenter Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Hitachi Storage ausnutzen, um Dateien zu manipulieren oder Informationen offenzulegen.

Product

Hitachi bietet verschiedene Storage-Lösungen an.

Vulnerabilities 1

High 7.9

CVE-2024-21840

Directory and File Permission Vulnerability in Hitachi Storage Plug-in for VMware vCenter

Incorrect Default Permissions vulnerability in Hitachi Storage Plug-in for VMware vCenter allows local users to read and write specific files. This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.0.0 through 04.9.2.

Hitachi Hitachi Storage Plug-in for VMware vCenter Virtualization

Jan 30, 2024

Revision history

2024-01-29 #1
Initiale Fassung

References

Hitachi Security Advisory vom 2024-01-29
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-108/index.html
GitHub Advisory Database vom 2024-01-29
https://github.com/advisories/GHSA-p687-9x5q-6prq