Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products are susceptible to unintended information disclosure via unprivileged access to HNAS configuration backup and diagnostic data.
Vulnerability Description
SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in a Storage administrative role are able to access HNAS configuration backup and diagnostic data, that would normally be barred to that specific administrative role.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Vulnerability Type
授权机制不恰当
Vulnerability Title
Hitachi Vantara HNAS 授权问题漏洞
Vulnerability Description
Hitachi Vantara HNAS是日本日立制作所（Hitachi）公司的一款企业级 NAS。用于为分布式企业和数据中心应用提供整合的 NAS 解决方案 Hitachi Vantara HNAS 14.8.7825.01版本存在授权问题漏洞，该漏洞源于存在信息泄露，允许经过身份验证的用户通过不安全直接对象引用下载敏感文件。
CVSS Information
N/A
Vulnerability Type
N/A