CVE-2022-4895

Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component) allows Man in the Middle Attack.This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.1-00.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-105/index.html	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:hitachi:infrastructure_analytics_advisor::::::::
	cpe:2.3:a:hitachi:ops_center_analyzer::::::::

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:x64:*

History

08 Mar 2023, 18:20

Type	Values Removed	Values Added
CPE		cpe:2.3:a:hitachi:infrastructure_analytics_advisor:::::::: cpe:2.3:a:hitachi:ops_center_analyzer:::::::: cpe:2.3:o:linux:linux_kernel:-::::::x64:
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 8.1
References	~~(MISC) https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-105/index.html -~~	(MISC) https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-105/index.html - Vendor Advisory
CWE		CWE-295

28 Feb 2023, 03:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-02-28 03:15

Updated : 2024-02-04 23:14

NVD link : CVE-2022-4895

Mitre link : CVE-2022-4895

CVE.ORG link : CVE-2022-4895

JSON object : View

Products Affected

hitachi

infrastructure_analytics_advisor
ops_center_analyzer

linux

linux_kernel

CWE

CWE-295

Improper Certificate Validation

{"id": "CVE-2022-4895", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}, {"type": "Secondary", "source": "hirt@hitachi.co.jp", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.7, "exploitabilityScore": 3.9}]}, "published": "2023-02-28T03:15:09.327", "references": [{"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-105/index.html", "tags": ["Vendor Advisory"], "source": "hirt@hitachi.co.jp"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-295"}]}, {"type": "Secondary", "source": "hirt@hitachi.co.jp", "description": [{"lang": "en", "value": "CWE-295"}]}], "descriptions": [{"lang": "en", "value": "Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component) allows Man in the Middle Attack.This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.1-00.\n\n"}], "lastModified": "2023-11-07T03:59:15.667", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hitachi:infrastructure_analytics_advisor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB7F114D-0C0A-42F7-B042-F1BE1424F172", "versionEndExcluding": "10.9.1-00", "versionStartIncluding": "2.0.0-00"}, {"criteria": "cpe:2.3:a:hitachi:ops_center_analyzer:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FED5B939-E839-4FA4-BC13-FDB365F37DC7", "versionEndExcluding": "10.9.1-00", "versionStartIncluding": "10.0.0-00"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:x64:*", "vulnerable": false, "matchCriteriaId": "71BFBE5F-56EB-45C9-B558-FC4D7CEA345A"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "hirt@hitachi.co.jp"}