title: Information Exposure Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer
description: Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer probe component) allows local users to gain sensitive information.
This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00.
problem types: CWE-532 Insertion of Sensitive Information into Log File
affected:
{
defaultStatus: unaffected
modules: Analytics probe
platforms: Linux
product: Hitachi Infrastructure Analytics Advisor
vendor: Hitachi
versions:
lessThanOrEqual: 4.4.0-00, status: affected, version: 2.0.0-00, versionType: custom
}
{
defaultStatus: unaffected
modules: Hitachi Ops Center Analyzer probe
platforms: Linux
product: Hitachi Ops Center Analyzer
vendor: Hitachi
versions:
changes: [at: 10.9.0-00, status: unaffected], lessThan: 10.9.0-00, status: affected, version: 10.0.0-00, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL