Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-21033

A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets (CSS) token sequence. Hitachi Command Suite includes Hitachi Device Manager, Hitachi Tiered Storage Manager, Hitachi Replication Manager, Hitachi Tuning Manager, Hitachi Global Link Manager and Hitachi Compute Systems Manager.

Published

2020-02-14T16:15:09.587

Last Modified

2024-11-21T04:02:44.550

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application hitachi device_manager < 8.6.2-00 Yes
Operating System linux linux_kernel - No
Operating System microsoft windows - No
Operating System oracle solaris - No
Application hitachi compute_systems_manager < 8.6.2-00 Yes
Operating System linux linux_kernel - No
Operating System microsoft windows - No
Application hitachi automation_director < 8.6.2-00 Yes
Operating System linux linux_kernel - No
Operating System microsoft windows - No
Application hitachi tiered_storage_manager < 8.6.2-00 Yes
Operating System linux linux_kernel - No
Operating System microsoft windows - No
Application hitachi replication_manager < 8.6.2-00 Yes
Operating System linux linux_kernel - No
Operating System microsoft windows - No
Application hitachi tuning_manager < 8.6.2-00 Yes
Operating System linux linux_kernel - No
Operating System microsoft windows - No
Application hitachi global_link_manager < 8.6.2-00 Yes
Operating System microsoft windows - No
Application hitachi infrastructure_analytics_advisor < 4.2.0-00 Yes
Operating System linux linux_kernel - No
Operating System microsoft windows - No
References