title: Insufficient Logging Vulnerability in HiRDB
description: Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23,
before 09-66-17,
before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before 10-06-02; HiRDB Server With Addtional Function: before 09-60-2M, before 09-65-/W
, before 09-66-/Q
; HiRDB Structured Data Access Facility: before 09-60-39, before 10-03-12, before 10-04-06, before 10-06-02.
problem types: CWE-778 Insufficient Logging
affected:
{
defaultStatus: unaffected
product: HiRDB Server
vendor: Hitachi
versions:
lessThan: 09-60, status: affected, version: 07-03, versionType: custom
changes: [at: 09-60-39, status: unaffected], lessThan: 09-60-39, status: affected, version: 09-60, versionType: custom
changes: [at: 09-65-23, status: unaffected], lessThan: 09-65-23, status: affected, version: 09-65, versionType: custom
changes: [at: 09-66-17, status: unaffected], lessThan: 09-66-17, status: affected, version: 09-66, versionType: custom
lessThanOrEqual: 10-00-*, status: affected, version: 10-00, versionType: custom
changes: [at: 10-01-10, status: unaffected], lessThan: 10-01-10, status: affected, version: 10-01, versionType: custom
lessThanOrEqual: 10-02-*, status: affected, version: 10-02, versionType: custom
changes: [at: 10-03-12, status: unaffected], lessThan: 10-03-12, status: affected, version: 10-03, versionType: custom
changes: [at: 10-04-06, status: unaffected], lessThan: 10-04-06, status: affected, version: 10-04, versionType: custom
changes: [at: 10-05-06, status: unaffected], lessThan: 10-05-06, status: affected, version: 10-05, versionType: custom
changes: [at: 10-06-02, status: unaffected], lessThan: 10-06-02, status: affected, version: 10-06, versionType: custom
}
{
defaultStatus: unaffected
product: HiRDB Server With Addtional Function
vendor: Hitachi
versions:
lessThan: 09-60, status: affected, version: 07-03, versionType: custom
changes: [at: 09-60-2M, status: unaffected], lessThan: 09-60-2M, status: affected, version: 09-60, versionType: custom
changes: [at: 09-65-/W, status: unaffected], lessThan: 09-65-/W, status: affected, version: 09-65, versionType: custom
changes: [at: 09-66-/Q, status: unaffected], lessThan: 09-66-/Q, status: affected, version: 09-66, versionType: custom
}
{
defaultStatus: unaffected
product: HiRDB Structured Data Access Facility
vendor: Hitachi
versions:
lessThan: 09-60, status: affected, version: 07-03, versionType: custom
changes: [at: 09-60-39, status: unaffected], lessThan: 09-60-39, status: affected, version: 09-60, versionType: custom
lessThanOrEqual: 09-65-*, status: affected, version: 09-65, versionType: custom
lessThanOrEqual: 09-66-*, status: affected, version: 09-66, versionType: custom
lessThanOrEqual: 10-00-*, status: affected, version: 10-00, versionType: custom
lessThanOrEqual: 10-01-*, status: affected, version: 10-01, versionType: custom
lessThanOrEqual: 10-02-*, status: affected, version: 10-02, versionType: custom
changes: [at: 10-03-12, status: unaffected], lessThan: 10-03-12, status: affected, version: 10-03, versionType: custom
changes: [at: 10-04-06, status: unaffected], lessThan: 10-04-06, status: affected, version: 10-04, versionType: custom
lessThanOrEqual: 10-05-*, status: affected, version: 10-05, versionType: custom
changes: [at: 10-06-02, status: unaffected], lessThan: 10-06-02, status: affected, version: 10-06, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL