Information disclosure in Hitachi Unified Storage Vm
CVE-2022-36407
Insertion of Sensitive Information into Log File vulnerability in Hitachi Virtual Storage Platform, Hitachi Virtual Storage Platform VP9500, Hitachi Virtual Storage Platform G1000, G1500, Hitachi Virtual Storage Platform F1500, Hitachi Vir…
EPSS: 0.001 (24.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Hitachi Unified Storage Vm — versions 0
- Hitachi Virtual Storage Platform — versions 0
- Hitachi Virtual Storage Platform 5100, 5500, 5100h, 5500h — versions 0
- Hitachi Virtual Storage Platform 5200, 5600, 5200h, 5600h — versions 0
- Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390h, E590h, E790h, E1090h — versions 0
- Hitachi Virtual Storage Platform F1500 — versions 0
- Hitachi Virtual Storage Platform F350, F370, F700, F900 — versions 0
- Hitachi Virtual Storage Platform F400, F600, F800 — versions 0
- Hitachi Virtual Storage Platform G1000, G1500 — versions 0
- Hitachi Virtual Storage Platform G100, G200, G400, G600, G800 — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2022-36407?
- CVE-2022-36407 is a critical-severity vulnerability in Hitachi Unified Storage Vm, classified under Insertion of Sensitive Information into Log File. CVSS score: 9.9/10. Published 2024-03-25.
- How severe is CVE-2022-36407?
- Critical severity. CVSS v3 base score is 9.9 out of 10.