{"id":"CVE-2026-3314","state":"PUBLISHED","title":"Missing Password Masking in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpoint","description":"Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe modules), Hitachi Ops Center Analyzer viewpoint, Hitachi Infrastructure Analytics Advisor (Data Center Analytics, Analytics probe modules).\n\nThis issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.8-00; Hitachi Ops Center Analyzer viewpoint: from 10.8.1-00 before 11.0.8-00; Hitachi Infrastructure Analytics Advisor: from 3.2.0-00 before 11.0.8-00.","publishedAt":"2026-05-26T05:57:09.752Z","updatedAt":"2026-05-26T12:22:47.157Z","severity":{"score":4.6,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"Hitachi"},"assigner":"Hitachi","products":["Hitachi Hitachi Ops Center Analyzer","Hitachi Hitachi Ops Center Analyzer viewpoint","Hitachi Hitachi Infrastructure Analytics Advisor"],"affected":[{"vendor":"Hitachi","product":"Hitachi Ops Center Analyzer","defaultStatus":"unaffected","versions":[{"version":"10.0.0-00","status":"affected","lessThan":"11.0.8-00","changes":[{"at":"11.0.8-00","status":"unaffected"}],"versionType":"custom"}],"platforms":["Linux","64 bit"],"modules":["Hitachi Ops Center Analyzer detail view","Hitachi Ops Center Analyzer probe"]},{"vendor":"Hitachi","product":"Hitachi Ops Center Analyzer viewpoint","defaultStatus":"unaffected","versions":[{"version":"10.8.1-00","status":"affected","lessThan":"11.0.8-00","changes":[{"at":"11.0.8-00","status":"unaffected"}],"versionType":"custom"}],"platforms":["Linux","64 bit"]},{"vendor":"Hitachi","product":"Hitachi Infrastructure Analytics Advisor","defaultStatus":"unaffected","versions":[{"version":"3.2.0-00","status":"affected","lessThan":"11.0.8-00","versionType":"custom"}],"platforms":["Linux","64 bit"],"modules":["Data Center Analytics","Analytics probe"]}],"references":["https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-120/index.html"],"weaknesses":["CWE-549"],"ingestedAt":"2026-10-29T20:11:50.837Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/3xxx/CVE-2026-3314.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-3314","state":"PUBLISHED","datePublished":"2026-05-26T05:57:09.752Z","dateUpdated":"2026-05-26T12:22:47.157Z","assignerShortName":"Hitachi","assignerOrgId":"50d0f415-c707-4733-9afc-8f6c0e9b3f82","dateReserved":"2026-02-27T06:34:14.106Z"},"containers":{"cna":{"title":"Missing Password Masking in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpoint","descriptions":[{"lang":"en","value":"Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe modules), Hitachi Ops Center Analyzer viewpoint, Hitachi Infrastructure Analytics Advisor (Data Center Analytics, Analytics probe modules).\n\nThis issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.8-00; Hitachi Ops Center Analyzer viewpoint: from 10.8.1-00 before 11.0.8-00; Hitachi Infrastructure Analytics Advisor: from 3.2.0-00 before 11.0.8-00."}],"affected":[{"vendor":"Hitachi","product":"Hitachi Ops Center Analyzer","defaultStatus":"unaffected","versions":[{"version":"10.0.0-00","status":"affected","lessThan":"11.0.8-00","changes":[{"at":"11.0.8-00","status":"unaffected"}],"versionType":"custom"}],"platforms":["Linux","64 bit"],"modules":["Hitachi Ops Center Analyzer detail view","Hitachi Ops Center Analyzer probe"]},{"vendor":"Hitachi","product":"Hitachi Ops Center Analyzer viewpoint","defaultStatus":"unaffected","versions":[{"version":"10.8.1-00","status":"affected","lessThan":"11.0.8-00","changes":[{"at":"11.0.8-00","status":"unaffected"}],"versionType":"custom"}],"platforms":["Linux","64 bit"]},{"vendor":"Hitachi","product":"Hitachi Infrastructure Analytics Advisor","defaultStatus":"unaffected","versions":[{"version":"3.2.0-00","status":"affected","lessThan":"11.0.8-00","versionType":"custom"}],"platforms":["Linux","64 bit"],"modules":["Data Center Analytics","Analytics probe"]}],"references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-120/index.html","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":4.6,"vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-549","lang":"en","description":"CWE-549 Missing password field masking","type":"CWE"}]}],"providerMetadata":{"shortName":"Hitachi","orgId":"50d0f415-c707-4733-9afc-8f6c0e9b3f82","dateUpdated":"2026-05-26T05:57:09.752Z"},"impacts":[{"capecId":"CAPEC-555","descriptions":[{"lang":"en","value":"CAPEC-555 Remote Services with Stolen Credentials"}]}],"source":{"advisory":"hitachi-sec-2026-120","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.2"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-26T12:21:39.028766Z","id":"CVE-2026-3314","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-26T12:22:47.157Z"}}]}}}