CVE-2023-6457: File and Directory Permission Vulnerability in Hitachi Tuning Manager
Published Jan 16, 2024
·Updated
Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Windows (Hitachi Tuning Manager server component) allows local users to read and write specific files.This issue affects Hitachi Tuning Manager: before 8.8.5-04.
Affected Software
1 affected component
Hitachi Tuning Manager<8.8.5-04
Event History
Jan 16, 2024
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-6457?
CVE-2023-6457 has been rated as a medium severity vulnerability due to its impact on file permissions.
2
How do I fix CVE-2023-6457?
To mitigate CVE-2023-6457, you should upgrade Hitachi Tuning Manager to version 8.8.5-04 or later.
3
Who is affected by CVE-2023-6457?
CVE-2023-6457 affects all versions of Hitachi Tuning Manager prior to 8.8.5-04 on Windows.
4
What kind of access does CVE-2023-6457 provide to local users?
CVE-2023-6457 allows local users to read and write specific files due to incorrect default permissions.
5
Is there a workaround for CVE-2023-6457 before upgrading?
Currently, there are no recommended workarounds for CVE-2023-6457 other than applying the software update.