title: Information Exposure Vulnerability in Cosminexus Component Container
description: Insertion of Sensitive Information into Log File vulnerability in Hitachi Cosminexus Component Container allows local users to gain sensitive information.This issue affects Cosminexus Component Container: from 11-30 before 11-30-05, from 11-20 before 11-20-07, from 11-10 through 11-10-*, from 11-00 before 11-00-12, All versions of V8 and V9.
problem types: CWE-532 Insertion of Sensitive Information into Log File
affected:
{
defaultStatus: unaffected
product: Cosminexus Component Container
vendor: Hitachi
versions:
changes: [at: 11-30-05, status: unaffected], lessThan: 11-30-05, status: affected, version: 11-30, versionType: custom
changes: [at: 11-20-07, status: unaffected], lessThan: 11-20-07, status: affected, version: 11-20, versionType: custom
lessThanOrEqual: 11-10-*, status: affected, version: 11-10, versionType: custom
changes: [at: 11-00-12, status: unaffected], lessThan: 11-00-12, status: affected, version: 11-00, versionType: custom
lessThanOrEqual: 09-*, status: affected, version: 08-00, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.6
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL