CVE-2022-36407: Information Exposure Vulnerability in Hitachi Disk Array Systems

Published Mar 25, 2024
·
Updated

Insertion of Sensitive Information into Log File vulnerability in Hitachi Virtual Storage Platform, Hitachi Virtual Storage Platform VP9500, Hitachi Virtual Storage Platform G1000, G1500, Hitachi Virtual Storage Platform F1500, Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, Hitachi Virtual Storage Platform 5200, 5600, 5200H, 5600H, Hitachi Unified Storage VM, Hitachi Virtual Storage Platform G100, G200, G400, G600, G800, Hitachi Virtual Storage Platform F400, F600, F800, Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, Hitachi Virtual Storage Platform F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H allows

local users to gain sensitive information.This issue affects Hitachi Virtual Storage Platform: before DKCMAIN Ver. 70-06-74-00/00, SVP Ver. 70-06-58/00; Hitachi Virtual Storage Platform VP9500: before DKCMAIN Ver. 70-06-74-00/00, SVP Ver. 70-06-58/00; Hitachi Virtual Storage Platform G1000, G1500: before DKCMAIN Ver. 80-06-92-00/00, SVP Ver. 80-06-87/00; Hitachi Virtual Storage Platform F1500: before DKCMAIN Ver. 80-06-92-00/00, SVP Ver. 80-06-87/00; Hitachi Virtual Storage Platform 5100, 5500,5100H, 5500H: before DKCMAIN Ver. 90-08-81-00/00, SVP Ver. 90-08-81/00, before DKCMAIN Ver. 90-08-62-00/00, SVP Ver. 90-08-62/00, before DKCMAIN Ver. 90-08-43-00/00, SVP Ver. 90-08-43/00; Hitachi Virtual Storage Platform 5200, 5600,5200H, 5600H: before DKCMAIN Ver. 90-08-81-00/00, SVP Ver. 90-08-81/00, before DKCMAIN Ver. 90-08-62-00/00, SVP Ver. 90-08-62/00, before DKCMAIN Ver. 90-08-43-00/00, SVP Ver. 90-08-43/00; Hitachi Unified Storage VM: before DKCMAIN Ver. 73-03-75-X0/00, SVP Ver. 73-03-74/00, before DKCMAIN Ver. 73(75)-03-75-X0/00, SVP Ver. 73(75)-03-74/00; Hitachi Virtual Storage Platform G100, G200, G400, G600, G800: before DKCMAIN Ver. 83-06-19-X0/00, SVP Ver. 83-06-20-X0/00, before DKCMAIN Ver. 83-05-47-X0/00, SVP Ver. 83-05-51-X0/00; Hitachi Virtual Storage Platform F400, F600, F800: before DKCMAIN Ver. 83-06-19-X0/00, SVP Ver. 83-06-20-X0/00, before DKCMAIN Ver. 83-05-47-X0/00, SVP Ver. 83-05-51-X0/00; Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900: before DKCMAIN Ver. 88-08-09-XX/00, SVP Ver. 88-08-11-X0/02; Hitachi Virtual Storage Platform F350, F370, F700, F900: before DKCMAIN Ver. 88-08-09-XX/00, SVP Ver. 88-08-11-X0/02; Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H: before DKCMAIN Ver. 93-06-81-X0/00, SVP Ver. 93-06-81-X0/00, before DKCMAIN Ver. 93-06-62-X0/00, SVP Ver. 93-06-62-X0/00, before DKCMAIN Ver. 93-06-43-X0/00, SVP Ver. 93-06-43-X0/00.

Affected Software

41 affected components
Hitachi Hitachi Virtual Storage Platform<DKCMAIN Ver. 70-06-74-00/00, <SVP Ver. 70-06-58/00
Hitachi Hitachi Virtual Storage Platform VP9500<DKCMAIN Ver. 70-06-74-00/00, <SVP Ver. 70-06-58/00
Hitachi Hitachi Virtual Storage Platform G1000<DKCMAIN Ver. 80-06-92-00/00, <SVP Ver. 80-06-87/00
Hitachi Hitachi Virtual Storage Platform G1500<DKCMAIN Ver. 80-06-92-00/00, <SVP Ver. 80-06-87/00
Hitachi Hitachi Virtual Storage Platform F1500<DKCMAIN Ver. 80-06-92-00/00, <SVP Ver. 80-06-87/00
Hitachi Hitachi Virtual Storage Platform 5100<DKCMAIN Ver. 90-08-81-00/00, <SVP Ver. 90-08-81/00, <DKCMAIN Ver. 90-08-62-00/00, <SVP Ver. 90-08-62/00, <DKCMAIN Ver. 90-08-43-00/00, <SVP Ver. 90-08-43/00
Hitachi Hitachi Virtual Storage Platform 5500<DKCMAIN Ver. 90-08-81-00/00, <SVP Ver. 90-08-81/00, <DKCMAIN Ver. 90-08-62-00/00, <SVP Ver. 90-08-62/00, <DKCMAIN Ver. 90-08-43-00/00, <SVP Ver. 90-08-43/00
Hitachi Hitachi Virtual Storage Platform 5100H<DKCMAIN Ver. 90-08-81-00/00, <SVP Ver. 90-08-81/00, <DKCMAIN Ver. 90-08-62-00/00, <SVP Ver. 90-08-62/00, <DKCMAIN Ver. 90-08-43-00/00, <SVP Ver. 90-08-43/00
Hitachi Hitachi Virtual Storage Platform 5500H<DKCMAIN Ver. 90-08-81-00/00, <SVP Ver. 90-08-81/00, <DKCMAIN Ver. 90-08-62-00/00, <SVP Ver. 90-08-62/00, <DKCMAIN Ver. 90-08-43-00/00, <SVP Ver. 90-08-43/00
Hitachi Hitachi Virtual Storage Platform 5200<DKCMAIN Ver. 90-08-81-00/00, <SVP Ver. 90-08-81/00, <DKCMAIN Ver. 90-08-62-00/00, <SVP Ver. 90-08-62/00, <DKCMAIN Ver. 90-08-43-00/00, <SVP Ver. 90-08-43/00
Hitachi Hitachi Virtual Storage Platform 5600<DKCMAIN Ver. 90-08-81-00/00, <SVP Ver. 90-08-81/00, <DKCMAIN Ver. 90-08-62-00/00, <SVP Ver. 90-08-62/00, <DKCMAIN Ver. 90-08-43-00/00, <SVP Ver. 90-08-43/00
Hitachi Hitachi Virtual Storage Platform 5200H<DKCMAIN Ver. 90-08-81-00/00, <SVP Ver. 90-08-81/00, <DKCMAIN Ver. 90-08-62-00/00, <SVP Ver. 90-08-62/00, <DKCMAIN Ver. 90-08-43-00/00, <SVP Ver. 90-08-43/00
Hitachi Hitachi Virtual Storage Platform 5600H<DKCMAIN Ver. 90-08-81-00/00, <SVP Ver. 90-08-81/00, <DKCMAIN Ver. 90-08-62-00/00, <SVP Ver. 90-08-62/00, <DKCMAIN Ver. 90-08-43-00/00, <SVP Ver. 90-08-43/00
Hitachi Hitachi Unified Storage VM<DKCMAIN Ver. 73-03-75-X0/00, <SVP Ver. 73-03-74/00, <DKCMAIN Ver. 73(75)-03-75-X0/00, <SVP Ver. 73(75)-03-74/00
Hitachi Hitachi Virtual Storage Platform G100<DKCMAIN Ver. 83-06-19-X0/00, <SVP Ver. 83-06-20-X0/00, <DKCMAIN Ver. 83-05-47-X0/00, <SVP Ver. 83-05-51-X0/00
Hitachi Hitachi Virtual Storage Platform G200<DKCMAIN Ver. 83-06-19-X0/00, <SVP Ver. 83-06-20-X0/00, <DKCMAIN Ver. 83-05-47-X0/00, <SVP Ver. 83-05-51-X0/00
Hitachi Hitachi Virtual Storage Platform G400<DKCMAIN Ver. 83-06-19-X0/00, <SVP Ver. 83-06-20-X0/00, <DKCMAIN Ver. 83-05-47-X0/00, <SVP Ver. 83-05-51-X0/00
Hitachi Hitachi Virtual Storage Platform G600<DKCMAIN Ver. 83-06-19-X0/00, <SVP Ver. 83-06-20-X0/00, <DKCMAIN Ver. 83-05-47-X0/00, <SVP Ver. 83-05-51-X0/00
Hitachi Hitachi Virtual Storage Platform G800<DKCMAIN Ver. 83-06-19-X0/00, <SVP Ver. 83-06-20-X0/00, <DKCMAIN Ver. 83-05-47-X0/00, <SVP Ver. 83-05-51-X0/00
Hitachi Hitachi Virtual Storage Platform F400<DKCMAIN Ver. 83-06-19-X0/00, <SVP Ver. 83-06-20-X0/00, <DKCMAIN Ver. 83-05-47-X0/00, <SVP Ver. 83-05-51-X0/00
Hitachi Hitachi Virtual Storage Platform F600<DKCMAIN Ver. 83-06-19-X0/00, <SVP Ver. 83-06-20-X0/00, <DKCMAIN Ver. 83-05-47-X0/00, <SVP Ver. 83-05-51-X0/00
Hitachi Hitachi Virtual Storage Platform F800<DKCMAIN Ver. 83-06-19-X0/00, <SVP Ver. 83-06-20-X0/00, <DKCMAIN Ver. 83-05-47-X0/00, <SVP Ver. 83-05-51-X0/00
Hitachi Hitachi Virtual Storage Platform G130<DKCMAIN Ver. 88-08-09-XX/00, <SVP Ver. 88-08-11-X0/02
Hitachi Hitachi Virtual Storage Platform G150<DKCMAIN Ver. 88-08-09-XX/00, <SVP Ver. 88-08-11-X0/02
Hitachi Hitachi Virtual Storage Platform G350<DKCMAIN Ver. 88-08-09-XX/00, <SVP Ver. 88-08-11-X0/02
Hitachi Hitachi Virtual Storage Platform G370<DKCMAIN Ver. 88-08-09-XX/00, <SVP Ver. 88-08-11-X0/02
Hitachi Hitachi Virtual Storage Platform G700<DKCMAIN Ver. 88-08-09-XX/00, <SVP Ver. 88-08-11-X0/02
Hitachi Hitachi Virtual Storage Platform G900<DKCMAIN Ver. 88-08-09-XX/00, <SVP Ver. 88-08-11-X0/02
Hitachi Hitachi Virtual Storage Platform F350<DKCMAIN Ver. 88-08-09-XX/00, <SVP Ver. 88-08-11-X0/02
Hitachi Hitachi Virtual Storage Platform F370<DKCMAIN Ver. 88-08-09-XX/00, <SVP Ver. 88-08-11-X0/02
Hitachi Hitachi Virtual Storage Platform F700<DKCMAIN Ver. 88-08-09-XX/00, <SVP Ver. 88-08-11-X0/02
Hitachi Hitachi Virtual Storage Platform F900<DKCMAIN Ver. 88-08-09-XX/00, <SVP Ver. 88-08-11-X0/02
Hitachi Hitachi Virtual Storage Platform E390<DKCMAIN Ver. 93-06-81-X0/00, <SVP Ver. 93-06-81-X0/00, <DKCMAIN Ver. 93-06-62-X0/00, <SVP Ver. 93-06-62-X0/00, <DKCMAIN Ver. 93-06-43-X0/00, <SVP Ver. 93-06-43-X0/00
Hitachi Hitachi Virtual Storage Platform E590<DKCMAIN Ver. 93-06-81-X0/00, <SVP Ver. 93-06-81-X0/00, <DKCMAIN Ver. 93-06-62-X0/00, <SVP Ver. 93-06-62-X0/00, <DKCMAIN Ver. 93-06-43-X0/00, <SVP Ver. 93-06-43-X0/00
Hitachi Hitachi Virtual Storage Platform E790<DKCMAIN Ver. 93-06-81-X0/00, <SVP Ver. 93-06-81-X0/00, <DKCMAIN Ver. 93-06-62-X0/00, <SVP Ver. 93-06-62-X0/00, <DKCMAIN Ver. 93-06-43-X0/00, <SVP Ver. 93-06-43-X0/00
Hitachi Hitachi Virtual Storage Platform E990<DKCMAIN Ver. 93-06-81-X0/00, <SVP Ver. 93-06-81-X0/00, <DKCMAIN Ver. 93-06-62-X0/00, <SVP Ver. 93-06-62-X0/00, <DKCMAIN Ver. 93-06-43-X0/00, <SVP Ver. 93-06-43-X0/00
Hitachi Hitachi Virtual Storage Platform E1090<DKCMAIN Ver. 93-06-81-X0/00, <SVP Ver. 93-06-81-X0/00, <DKCMAIN Ver. 93-06-62-X0/00, <SVP Ver. 93-06-62-X0/00, <DKCMAIN Ver. 93-06-43-X0/00, <SVP Ver. 93-06-43-X0/00
Hitachi Hitachi Virtual Storage Platform E390H<DKCMAIN Ver. 93-06-81-X0/00, <SVP Ver. 93-06-81-X0/00, <DKCMAIN Ver. 93-06-62-X0/00, <SVP Ver. 93-06-62-X0/00, <DKCMAIN Ver. 93-06-43-X0/00, <SVP Ver. 93-06-43-X0/00
Hitachi Hitachi Virtual Storage Platform E590H<DKCMAIN Ver. 93-06-81-X0/00, <SVP Ver. 93-06-81-X0/00, <DKCMAIN Ver. 93-06-62-X0/00, <SVP Ver. 93-06-62-X0/00, <DKCMAIN Ver. 93-06-43-X0/00, <SVP Ver. 93-06-43-X0/00
Hitachi Hitachi Virtual Storage Platform E790H<DKCMAIN Ver. 93-06-81-X0/00, <SVP Ver. 93-06-81-X0/00, <DKCMAIN Ver. 93-06-62-X0/00, <SVP Ver. 93-06-62-X0/00, <DKCMAIN Ver. 93-06-43-X0/00, <SVP Ver. 93-06-43-X0/00
Hitachi Hitachi Virtual Storage Platform E1090H<DKCMAIN Ver. 93-06-81-X0/00, <SVP Ver. 93-06-81-X0/00, <DKCMAIN Ver. 93-06-62-X0/00, <SVP Ver. 93-06-62-X0/00, <DKCMAIN Ver. 93-06-43-X0/00, <SVP Ver. 93-06-43-X0/00

Event History

Mar 25, 2024
CVE Published
via MITRE·05:55 AM
Data Sourced
via MITRE·05:55 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2022-36407?

CVE-2022-36407 has been assigned a high severity rating due to potential exposure of sensitive information.

2

What products are affected by CVE-2022-36407?

CVE-2022-36407 affects multiple Hitachi Virtual Storage Platform models including VP9500, G1000, G1500, 5100, 5500, and others.

3

How do I fix CVE-2022-36407?

To address CVE-2022-36407, users should update their affected Hitachi Virtual Storage Platform to the latest patch version.

4

What type of vulnerability is CVE-2022-36407?

CVE-2022-36407 is classified as an Insertion of Sensitive Information into Log File vulnerability.

5

What can happen if CVE-2022-36407 is exploited?

If exploited, CVE-2022-36407 could lead to unauthorized access to sensitive credentials stored in log files.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203