CVE-2022-3191

low-risk
Published 2022-11-01

Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Analyzer on Linux (Virtual Strage Software Agent component) allows local users to gain sensitive information. This issue affects Hitachi Ops Center Analyzer: from 10.8.1-00 before 10.9.0-00

Do I need to act?

-
0.05% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.6/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Ops Center Analyzer

Affected Vendors

Hitachi

References (2)

Vendor Advisory https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022...
Vendor Advisory https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022...
26
/ 100
low-risk
Severity 21/34 · High
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal