Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2023-3440

File and Directory Permission Vulnerability in JP1/Performance Management

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Hitachi

Description

Incorrect Default Permissions vulnerability in Hitachi JP1/Performance Management on Windows allows File Manipulation.This issue affects JP1/Performance Management - Manager: from 09-00 before 12-50-07; JP1/Performance Management - Base: from 09-00 through 10-50-*; JP1/Performance Management - Agent Option for Application Server: from 11-00 before 11-50-16; JP1/Performance Management - Agent Option for Enterprise Applications: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for HiRDB: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for IBM Lotus Domino: from 10-00 before 11-50-16; JP1/Performance Management - Agent Option for Microsoft(R) Exchange Server: from 09-00 before  12-00-14; JP1/Performance Management - Agent Option for Microsoft(R) Internet Information Server: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for Microsoft(R) SQL Server: from 09-00 before 12-50-07; JP1/Performance Management - Agent Option for Oracle: from 09-00 before  12-10-08; JP1/Performance Management - Agent Option for Platform: from 09-00 before 12-50-07; JP1/Performance Management - Agent Option for Service Response: from 09-00 before 11-50-16; JP1/Performance Management - Agent Option for Transaction System: from 11-00 before 12-00-14; JP1/Performance Management - Remote Monitor for Microsoft(R) SQL Server: from 09-00 before 12-50-07; JP1/Performance Management - Remote Monitor for Oracle: from 09-00 before 12-10-08; JP1/Performance Management - Remote Monitor for Platform: from 09-00 before 12-10-08; JP1/Performance Management - Remote Monitor for Virtual Machine: from 10-00 before 12-50-07; JP1/Performance Management - Agent Option for Domino: from 09-00 through 09-00-*; JP1/Performance Management - Agent Option for IBM WebSphere Application Server: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for IBM WebSphere MQ: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for JP1/AJS3: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for OpenTP1: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for Oracle WebLogic Server: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for uCosminexus Application Server: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for Virtual Machine: from 09-00 through 09-01-*.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hitachi JP1/Performance Management - Manager

Default version status: unaffected

  • 09-00 to < 11-50affected
  • 11-50 to < 11-50-16affected
  • 12-00 to < 12-00-14affected
  • 12-10 to < 12-10-08affected
  • 12-50 to < 12-50-07affected

Hitachi JP1/Performance Management - Base

Default version status: unaffected

  • 09-00 to ≤ 10-50-*affected

Hitachi JP1/Performance Management - Agent Option for Application Server

Default version status: unaffected

  • 11-00 to < 11-50-16affected

Hitachi JP1/Performance Management - Agent Option for Enterprise Applications

Default version status: unaffected

  • 09-00 to < 11-50affected
  • 11-50 to < 11-50-16affected
  • 12-00 to < 12-00-14affected

Hitachi JP1/Performance Management - Agent Option for HiRDB

Default version status: unaffected

  • 09-00 to < 11-50affected
  • 11-50 to < 11-50-16affected
  • 12-00 to < 12-00-14affected

Hitachi JP1/Performance Management - Agent Option for IBM Lotus Domino

Default version status: unaffected

  • 10-00 to < 11-50-16affected

Hitachi JP1/Performance Management - Agent Option for Microsoft(R) Exchange Server

Default version status: unaffected

  • 09-00 to < 11-50affected
  • 11-50 to < 11-50-16affected
  • 12-00 to < 12-00-14affected

Hitachi JP1/Performance Management - Agent Option for Microsoft(R) Internet Information Server

Default version status: unaffected

  • 09-00 to < 11-50affected
  • 11-50 to < 11-50-16affected
  • 12-00 to < 12-00-14affected

Hitachi JP1/Performance Management - Agent Option for Microsoft(R) SQL Server

Default version status: unaffected

  • 09-00 to < 11-50affected
  • 11-50 to < 11-50-16affected
  • 12-00 to < 12-00-14affected
  • 12-50 to < 12-50-07affected

Hitachi JP1/Performance Management - Agent Option for Oracle

Default version status: unaffected

  • 09-00 to < 11-50affected
  • 11-50 to < 11-50-16affected
  • 12-00 to < 12-00-14affected
  • 12-10 to < 12-10-08affected

Hitachi JP1/Performance Management - Agent Option for Platform

Default version status: unaffected

  • 09-00 to < 11-50affected
  • 11-50 to < 11-50-16affected
  • 12-00 to < 12-00-14affected
  • 12-50 to < 12-50-07affected

Hitachi JP1/Performance Management - Agent Option for Service Response

Default version status: unaffected

  • 09-00 to < 11-50-16affected

Hitachi JP1/Performance Management - Agent Option for Transaction System

Default version status: unaffected

  • 11-00 to < 11-50-16affected
  • 12-00 to < 12-00-14affected

Hitachi JP1/Performance Management - Remote Monitor for Microsoft(R) SQL Server

Default version status: unaffected

  • 09-00 to < 11-50affected
  • 11-50 to < 11-50-16affected
  • 12-00 to < 12-00-14affected
  • 12-50 to < 12-50-07affected

Hitachi JP1/Performance Management - Remote Monitor for Oracle

Default version status: unaffected

  • 09-00 to < 11-50affected
  • 11-50 to < 11-50-16affected
  • 12-00 to < 12-00-14affected
  • 12-10 to < 12-10-08affected

Hitachi JP1/Performance Management - Remote Monitor for Platform

Default version status: unaffected

  • 09-00 to < 11-50affected
  • 11-50 to < 11-50-16affected
  • 12-00 to < 12-00-14affected
  • 12-10 to < 12-10-08affected

Hitachi JP1/Performance Management - Remote Monitor for Virtual Machine

Default version status: unaffected

  • 10-00 to < 11-50affected
  • 11-50 to < 11-50-16affected
  • 12-00 to < 12-00-14affected
  • 12-10 to < 12-10-08affected
  • 12-50 to < 12-50-07affected

Hitachi JP1/Performance Management - Agent Option for Domino

Default version status: unaffected

  • 09-00 to ≤ 09-00-*affected

Hitachi JP1/Performance Management - Agent Option for IBM WebSphere Application Server

Default version status: unaffected

  • 09-00 to ≤ 10-00-*affected

Hitachi JP1/Performance Management - Agent Option for IBM WebSphere MQ

Default version status: unaffected

  • 09-00 to ≤ 10-00-*affected

Hitachi JP1/Performance Management - Agent Option for JP1/AJS3

Default version status: unaffected

  • 09-00 to ≤ 10-00-*affected

Hitachi JP1/Performance Management - Agent Option for OpenTP1

Default version status: unaffected

  • 09-00 to ≤ 10-00-*affected

Hitachi JP1/Performance Management - Agent Option for Oracle WebLogic Server

Default version status: unaffected

  • 09-00 to ≤ 10-00-*affected

Hitachi JP1/Performance Management - Agent Option for uCosminexus Application Server

Default version status: unaffected

  • 09-00 to ≤ 10-00-*affected

Hitachi JP1/Performance Management - Agent Option for Virtual Machine

Default version status: unaffected

  • 09-00 to ≤ 09-01-*affected

References