CVE-2025-5781

MEDIUM

5.2

Descricao

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.

Detalhes CVE

Pontuacao CVSS v3.15.2

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado2/25/2026

Ultima modificacao2/27/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

hitachi:configuration_managerhitachi:device_managerhitachi:ops_center_api_configuration_managerlinux:linux_kernelmicrosoft:windows

Fraquezas (CWE)

CWE-532

Referencias

https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-111/index.html(hirt@hitachi.co.jp)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.