title: Authentication Bypass Vulnerability Vulnerability in  Retail Operations Product and Counterparty Settlement and Billing (CSB)
description: Improper Access Control vulnerability in the application authentication and authorization of Hitachi Energy Retail Operations, Counterparty Settlement and Billing (CSB) allows an attacker to execute a modified signed Java Applet JAR file. A successful exploitation may lead to data extraction or modification of data inside the application. This issue affects: Hitachi Energy Retail Operations 5.7.3 and prior versions. Hitachi Energy Counterparty Settlement and Billing (CSB) 5.7.3 prior versions.
problem types: CWE-284 Improper Access Control
affected:
{
product: Retail Operations
vendor: Hitachi Energy
versions:
lessThan: 5.7.3.1, status: affected, version: 5.7.3, versionType: custom
}
{
product: Counterparty Settlement and Billing (CSB)
vendor: Hitachi Energy
versions:
lessThan: 5.7.3.1, status: affected, version: 5.7.3, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
version: 3.1
]
solutions: - Vulnerability is remediated in Retail Operations v5.7.3.1
- Vulnerability is remediated in CSB v5.7.3.1