title: Information Exposure Vulnerability in Hitachi Ops Center Analyzer
description: Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Analyzer on Linux (Virtual Strage Software Agent component) allows local users to gain sensitive information.
This issue affects Hitachi Ops Center Analyzer: from 10.8.1-00 before 10.9.0-00
problem types: CWE-532 Insertion of Sensitive Information into Log File
affected:
{
defaultStatus: unaffected
modules: Virtual Strage Software Agent
platforms: Linux
product: Hitachi Ops Center Analyzer
vendor: Hitachi
versions:
changes: [at: 10.9.0-00, status: unaffected], lessThan: 10.9.0-00, status: affected, version: 10.8.1-00, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 6.6
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL