CVE-2020-3354: Hitachi Ops Center Analyzer Password Masking Vulnerability

Vulnerability Overview Vulnerability Name: Missing Password Masking CVE ID: CVE-2020-3354 CVSS Score: 4.0 (Medium) Vulnerability Description: A missing password masking vulnerability was found in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer, and Hitachi Ops Center Analyzer viewpoint. Affected Scope Affected Products: - Hitachi Infrastructure Analytics Advisor (English version) - Component: Data Center Analytics - Version: 8.2.0-00 or higher, but lower than 11.0.8-00 - Component: Analytics probe - Version: 9.2.0-00 or higher, but lower than 11.0.8-00 - Hitachi Ops Center Analyzer (English version) - Component: Hitachi Ops Center Analyzer detail view - Version: 10.0.0-00 or higher, but lower than 11.0.8-00 - Component: Hitachi Ops Center Analyzer probe - Version: 10.0.0-00 or higher, but lower than 11.0.8-00 - Hitachi Ops Center Analyzer viewpoint (English version) - Version: 10.8.1-00 or higher, but lower than 11.0.8-00 Remediation Fixed Products: - Hitachi Ops Center Analyzer (English version) - Version: 11.0.8-00 - Hitachi Ops Center Analyzer viewpoint (English version) - Version: 11.0.8-00 Recommendation: Please upgrade to the fixed versions mentioned above. For products not listed, contact a Hitachi support representative for detailed information. Additional Information Release Date: May 26, 2020 Security Information ID: hitachi-sec-2020-120 Notes Hitachi does not intend to investigate or respond to storage management software vulnerabilities resulting from the end of support for storage devices. Web page content may change due to developer updates; it is recommended to refer to the latest information. Hitachi assumes no legal responsibility for the information on the web page. Code Block POC or Exploit Code: No POC or exploit code is included on the page.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2020-3354: Hitachi Ops Center Analyzer Password Masking Vulnerability

More from this source