{"id":"CVE-2024-10205","state":"PUBLISHED","title":"Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer","description":"Authentication Bypass\nvulnerability in Hitachi Ops Center Analyzer on Linux, 64 bit (Hitachi Ops Center Analyzer detail view component), Hitachi Infrastructure Analytics Advisor on Linux, 64 bit (Hitachi Data Center Analytics \n\ncomponent\n\n).This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.3-00; Hitachi Infrastructure Analytics Advisor: from 2.1.0-00 through 4.4.0-00.","publishedAt":"2024-12-17T01:16:19.301Z","updatedAt":"2024-12-17T14:57:23.929Z","severity":{"score":9.4,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","source":"Hitachi"},"assigner":"Hitachi","products":["Hitachi Hitachi Ops Center Analyzer","Hitachi Hitachi Infrastructure Analytics Advisor"],"affected":[{"vendor":"Hitachi","product":"Hitachi Ops Center Analyzer","defaultStatus":"unaffected","versions":[{"version":"10.0.0-00","status":"affected","lessThan":"11.0.3-00","changes":[{"at":"11.0.3-00","status":"unaffected"}],"versionType":"custom"}],"modules":["Hitachi Ops Center Analyzer detail view"],"platforms":["Linux","64 bit"]},{"vendor":"Hitachi","product":"Hitachi Infrastructure Analytics Advisor","defaultStatus":"unaffected","versions":[{"version":"2.1.0-00","status":"affected","lessThanOrEqual":"4.4.0-00","versionType":"custom"}],"modules":["Hitachi Data Center Analytics"],"platforms":["Linux","64 bit"]}],"references":["https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-151/index.html"],"weaknesses":["CWE-306"],"ingestedAt":"2026-10-29T20:06:50.777Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/10xxx/CVE-2024-10205.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-10205","state":"PUBLISHED","datePublished":"2024-12-17T01:16:19.301Z","dateUpdated":"2024-12-17T14:57:23.929Z","assignerShortName":"Hitachi","assignerOrgId":"50d0f415-c707-4733-9afc-8f6c0e9b3f82","dateReserved":"2024-10-21T09:03:32.235Z"},"containers":{"cna":{"title":"Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer","descriptions":[{"lang":"en","value":"Authentication Bypass\nvulnerability in Hitachi Ops Center Analyzer on Linux, 64 bit (Hitachi Ops Center Analyzer detail view component), Hitachi Infrastructure Analytics Advisor on Linux, 64 bit (Hitachi Data Center Analytics \n\ncomponent\n\n).This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.3-00; Hitachi Infrastructure Analytics Advisor: from 2.1.0-00 through 4.4.0-00."}],"affected":[{"vendor":"Hitachi","product":"Hitachi Ops Center Analyzer","defaultStatus":"unaffected","versions":[{"version":"10.0.0-00","status":"affected","lessThan":"11.0.3-00","changes":[{"at":"11.0.3-00","status":"unaffected"}],"versionType":"custom"}],"modules":["Hitachi Ops Center Analyzer detail view"],"platforms":["Linux","64 bit"]},{"vendor":"Hitachi","product":"Hitachi Infrastructure Analytics Advisor","defaultStatus":"unaffected","versions":[{"version":"2.1.0-00","status":"affected","lessThanOrEqual":"4.4.0-00","versionType":"custom"}],"modules":["Hitachi Data Center Analytics"],"platforms":["Linux","64 bit"]}],"references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-151/index.html","tags":["vendor-advisory"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.4,"baseSeverity":"CRITICAL","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-306","description":"CWE-306 Missing Authentication for Critical Function","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Hitachi","orgId":"50d0f415-c707-4733-9afc-8f6c0e9b3f82","dateUpdated":"2024-12-17T01:16:19.301Z"},"impacts":[{"capecId":"CAPEC-115","descriptions":[{"lang":"en","value":"CAPEC-115 Authentication Bypass"}]}],"source":{"advisory":"hitachi-sec-2024-151","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-12-17T14:56:22.276629Z","id":"CVE-2024-10205","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-12-17T14:57:23.929Z"}}]}}}