{"id":"CVE-2022-3884","state":"PUBLISHED","title":"Directory Permission Vulnerability in Hitachi Ops Center Analyzer","description":"Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID Agent component) allows local users to read and write specific files.This issue affects Hitachi Ops Center Analyzer: from 10.9.0-00 before 10.9.0-01.\n\n","publishedAt":"2023-02-28T02:01:26.105Z","updatedAt":"2025-03-07T18:14:32.411Z","severity":{"score":7.3,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","source":"Hitachi"},"assigner":"Hitachi","products":["Hitachi Hitachi Ops Center Analyzer"],"affected":[{"vendor":"Hitachi","product":"Hitachi Ops Center Analyzer","defaultStatus":"unaffected","versions":[{"version":"10.9.0-00","status":"affected","lessThan":"10.9.0-01","changes":[{"at":"10.9.0-01","status":"unaffected"}],"versionType":"custom"}],"modules":["Hitachi Ops Center Analyzer RAID Agent"],"platforms":["Windows"]}],"references":["https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-105/index.html"],"weaknesses":["CWE-276"],"ingestedAt":"2026-10-29T19:50:32.060Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/3xxx/CVE-2022-3884.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-3884","state":"PUBLISHED","datePublished":"2023-02-28T02:01:26.105Z","dateUpdated":"2025-03-07T18:14:32.411Z","assignerShortName":"Hitachi","assignerOrgId":"50d0f415-c707-4733-9afc-8f6c0e9b3f82","dateReserved":"2022-11-08T02:40:56.780Z"},"containers":{"cna":{"title":"Directory Permission Vulnerability in Hitachi Ops Center Analyzer","descriptions":[{"lang":"en","value":"Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID Agent component) allows local users to read and write specific files.This issue affects Hitachi Ops Center Analyzer: from 10.9.0-00 before 10.9.0-01.\n\n"}],"affected":[{"vendor":"Hitachi","product":"Hitachi Ops Center Analyzer","defaultStatus":"unaffected","versions":[{"version":"10.9.0-00","status":"affected","lessThan":"10.9.0-01","changes":[{"at":"10.9.0-01","status":"unaffected"}],"versionType":"custom"}],"modules":["Hitachi Ops Center Analyzer RAID Agent"],"platforms":["Windows"]}],"references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-105/index.html","tags":["vendor-advisory"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-276","description":"CWE-276 Incorrect Default Permissions","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Hitachi","orgId":"50d0f415-c707-4733-9afc-8f6c0e9b3f82","dateUpdated":"2023-02-28T02:01:26.105Z"},"impacts":[{"capecId":"CAPEC-165","descriptions":[{"lang":"en","value":"CAPEC-165 File Manipulation"}]}],"source":{"advisory":"hitachi-sec-2023-105","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-105/index.html","tags":["vendor-advisory","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T01:20:58.784Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-03-07T18:14:22.527808Z","id":"CVE-2022-3884","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-07T18:14:32.411Z"}}]}}}