CVE-2022-41553: Information Exposure Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer
First published: Tue Nov 01 2022(Updated: )
Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer probe component) allows local users to gain sensitive information. This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00.
Credit: hirt@hitachi.co.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hitachi Infrastructure Analytics Advisor | >=2.0.0-00<=4.4.0-00 | |
| Linux Linux kernel | ||
| Hitachi Ops Center Analyzer | >=10.0.0-00<10.9.0-00 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-41553.
What is the title of this vulnerability?
The title of this vulnerability is 'Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advisor'.
Which software is affected by this vulnerability?
The Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component) and Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer probe component) are affected by this vulnerability.
What is the severity of CVE-2022-41553?
The severity of CVE-2022-41553 is medium with a score of 5.5.
How can local users exploit this vulnerability?
Local users can exploit this vulnerability to gain sensitive information.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/title
- agent/tags
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- vendor/hitachi
- canonical/hitachi infrastructure analytics advisor
- version/hitachi infrastructure analytics advisor/2.0.0-00
- version/hitachi infrastructure analytics advisor/4.4.0-00
- vendor/linux
- canonical/linux linux kernel
- canonical/hitachi ops center analyzer
- version/hitachi ops center analyzer/10.0.0-00