title: Improper Validation of Certificate Vulnerability in Hitachi Device Manager
description: Improper Validation of Certificate with Host Mismatch vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Data Collector components) allows Man in the Middle Attack.This issue affects Hitachi Device Manager: before 8.8.5-02.
problem types: CWE-297 Improper Validation of Certificate with Host Mismatch
affected:
{
defaultStatus: unaffected
modules: [Device Manager Server, Device Manager Agent, Host Data Collector]
platforms: [Windows, Linux]
product: Hitachi Device Manager
vendor: Hitachi
versions:
changes: [at: 8.8.5-02, status: unaffected], lessThan: 8.8.5-02, status: affected, version: 0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.6
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL