Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-2244 EUVD-2024-27200GHSA-q7m2-r3xv-fmr3

REST service authentication anomaly with “valid username/no password” credential combination for batch job processing resulting in successf…

Published Mar 27, 2024 · Updated Aug 6, 2024 · Assigned by Hitachi Energy

Description

REST service authentication anomaly with “valid username/no password” credential combination for batch job processing resulting in successful service invocation. The anomaly doesn’t exist with other credential combinations.

Affected products

VendorProductAffectedFixed
Hitachi Energy Asset Suite EAM 9.6.3.0 – < 9.6.3.13, 9.6.4.0 – < 9.6.4.1 9.6.3.13

Advisories 1

References