Skip to content
OpenAdvisories
High · 8.4 CVE-2023-3440 EUVD-2023-44104GHSA-g4j9-c52x-fgmm

File and Directory Permission Vulnerability in JP1/Performance Management

Published Oct 3, 2023 · Updated Aug 2, 2024 · Assigned by Hitachi

Vendor: Hitachi Product: JP1/Performance Management - Agent Option for Application Server Product: JP1/Performance Management - Agent Option for Domino Product: JP1/Performance Management - Agent Option for Enterprise Applications Product: JP1/Performance Management - Agent Option for HiRDB Product: JP1/Performance Management - Agent Option for IBM Lotus Domino Product: JP1/Performance Management - Agent Option for IBM WebSphere Application Server Product: JP1/Performance Management - Agent Option for IBM WebSphere MQ Product: JP1/Performance Management - Agent Option for JP1/AJS3 Product: JP1/Performance Management - Agent Option for Microsoft(R) Exchange Server Product: JP1/Performance Management - Agent Option for Microsoft(R) Internet Information Server Product: JP1/Performance Management - Agent Option for Microsoft(R) SQL Server Product: JP1/Performance Management - Agent Option for OpenTP1 Product: JP1/Performance Management - Agent Option for Oracle Product: JP1/Performance Management - Agent Option for Oracle WebLogic Server Product: JP1/Performance Management - Agent Option for Platform Product: JP1/Performance Management - Agent Option for Service Response Product: JP1/Performance Management - Agent Option for Transaction System Product: JP1/Performance Management - Agent Option for uCosminexus Application Server Product: JP1/Performance Management - Agent Option for Virtual Machine Product: JP1/Performance Management - Base Product: JP1/Performance Management - Manager Product: JP1/Performance Management - Remote Monitor for Microsoft(R) SQL Server Product: JP1/Performance Management - Remote Monitor for Oracle Product: JP1/Performance Management - Remote Monitor for Platform Product: JP1/Performance Management - Remote Monitor for Virtual Machine

Description

Incorrect Default Permissions vulnerability in Hitachi JP1/Performance Management on Windows allows File Manipulation.This issue affects JP1/Performance Management - Manager: from 09-00 before 12-50-07; JP1/Performance Management - Base: from 09-00 through 10-50-*; JP1/Performance Management - Agent Option for Application Server: from 11-00 before 11-50-16; JP1/Performance Management - Agent Option for Enterprise Applications: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for HiRDB: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for IBM Lotus Domino: from 10-00 before 11-50-16; JP1/Performance Management - Agent Option for Microsoft(R) Exchange Server: from 09-00 before  12-00-14; JP1/Performance Management - Agent Option for Microsoft(R) Internet Information Server: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for Microsoft(R) SQL Server: from 09-00 before 12-50-07; JP1/Performance Management - Agent Option for Oracle: from 09-00 before  12-10-08; JP1/Performance Management - Agent Option for Platform: from 09-00 before 12-50-07; JP1/Performance Management - Agent Option for Service Response: from 09-00 before 11-50-16; JP1/Performance Management - Agent Option for Transaction System: from 11-00 before 12-00-14; JP1/Performance Management - Remote Monitor for Microsoft(R) SQL Server: from 09-00 before 12-50-07; JP1/Performance Management - Remote Monitor for Oracle: from 09-00 before 12-10-08; JP1/Performance Management - Remote Monitor for Platform: from 09-00 before 12-10-08; JP1/Performance Management - Remote Monitor for Virtual Machine: from 10-00 before 12-50-07; JP1/Performance Management - Agent Option for Domino: from 09-00 through 09-00-*; JP1/Performance Management - Agent Option for IBM WebSphere Application Server: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for IBM WebSphere MQ: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for JP1/AJS3: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for OpenTP1: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for Oracle WebLogic Server: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for uCosminexus Application Server: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for Virtual Machine: from 09-00 through 09-01-*.

Affected products

VendorProductAffectedFixed
Hitachi JP1/Performance Management - Manager 09-00 – < 11-50, 11-50 – < 11-50-16, 12-00 – < 12-00-14, 12-10 – < 12-10-08, 12-50 – < 12-50-07 11-50
Hitachi JP1/Performance Management - Base 09-00 – ≤ 10-50-* —
Hitachi JP1/Performance Management - Agent Option for Application Server 11-00 – < 11-50-16 11-50-16
Hitachi JP1/Performance Management - Agent Option for Enterprise Applications 09-00 – < 11-50, 11-50 – < 11-50-16, 12-00 – < 12-00-14 11-50
Hitachi JP1/Performance Management - Agent Option for HiRDB 09-00 – < 11-50, 11-50 – < 11-50-16, 12-00 – < 12-00-14 11-50
Hitachi JP1/Performance Management - Agent Option for IBM Lotus Domino 10-00 – < 11-50-16 11-50-16
Hitachi JP1/Performance Management - Agent Option for Microsoft(R) Exchange Server 09-00 – < 11-50, 11-50 – < 11-50-16, 12-00 – < 12-00-14 11-50
Hitachi JP1/Performance Management - Agent Option for Microsoft(R) Internet Information Server 09-00 – < 11-50, 11-50 – < 11-50-16, 12-00 – < 12-00-14 11-50
Hitachi JP1/Performance Management - Agent Option for Microsoft(R) SQL Server 09-00 – < 11-50, 11-50 – < 11-50-16, 12-00 – < 12-00-14, 12-50 – < 12-50-07 11-50
Hitachi JP1/Performance Management - Agent Option for Oracle 09-00 – < 11-50, 11-50 – < 11-50-16, 12-00 – < 12-00-14, 12-10 – < 12-10-08 11-50
Hitachi JP1/Performance Management - Agent Option for Platform 09-00 – < 11-50, 11-50 – < 11-50-16, 12-00 – < 12-00-14, 12-50 – < 12-50-07 11-50
Hitachi JP1/Performance Management - Agent Option for Service Response 09-00 – < 11-50-16 11-50-16
Hitachi JP1/Performance Management - Agent Option for Transaction System 11-00 – < 11-50-16, 12-00 – < 12-00-14 11-50-16
Hitachi JP1/Performance Management - Remote Monitor for Microsoft(R) SQL Server 09-00 – < 11-50, 11-50 – < 11-50-16, 12-00 – < 12-00-14, 12-50 – < 12-50-07 11-50
Hitachi JP1/Performance Management - Remote Monitor for Oracle 09-00 – < 11-50, 11-50 – < 11-50-16, 12-00 – < 12-00-14, 12-10 – < 12-10-08 11-50
Hitachi JP1/Performance Management - Remote Monitor for Platform 09-00 – < 11-50, 11-50 – < 11-50-16, 12-00 – < 12-00-14, 12-10 – < 12-10-08 11-50
Hitachi JP1/Performance Management - Remote Monitor for Virtual Machine 10-00 – < 11-50, 11-50 – < 11-50-16, 12-00 – < 12-00-14, 12-10 – < 12-10-08, 12-50 – < 12-50-07 11-50
Hitachi JP1/Performance Management - Agent Option for Domino 09-00 – ≤ 09-00-* —
Hitachi JP1/Performance Management - Agent Option for IBM WebSphere Application Server 09-00 – ≤ 10-00-* —
Hitachi JP1/Performance Management - Agent Option for IBM WebSphere MQ 09-00 – ≤ 10-00-* —
Hitachi JP1/Performance Management - Agent Option for JP1/AJS3 09-00 – ≤ 10-00-* —
Hitachi JP1/Performance Management - Agent Option for OpenTP1 09-00 – ≤ 10-00-* —
Hitachi JP1/Performance Management - Agent Option for Oracle WebLogic Server 09-00 – ≤ 10-00-* —
Hitachi JP1/Performance Management - Agent Option for uCosminexus Application Server 09-00 – ≤ 10-00-* —
Hitachi JP1/Performance Management - Agent Option for Virtual Machine 09-00 – ≤ 09-01-* —

References