title: Directory Permission Vulnerability in Hitachi Ops Center Analyzer
description: Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID Agent component) allows local users to read and write specific files.This issue affects Hitachi Ops Center Analyzer: from 10.9.0-00 before 10.9.0-01.
problem types: CWE-276 Incorrect Default Permissions
affected:
{
defaultStatus: unaffected
modules: Hitachi Ops Center Analyzer RAID Agent
platforms: Windows
product: Hitachi Ops Center Analyzer
vendor: Hitachi
versions:
changes: [at: 10.9.0-01, status: unaffected], lessThan: 10.9.0-01, status: affected, version: 10.9.0-00, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL