← CVE Intelligence

CVE-2023-3440

File and Directory Permission Vulnerability in JP1/Performance Management PUBLISHED

Description (CNA)

Incorrect Default Permissions vulnerability in Hitachi JP1/Performance Management on Windows allows File Manipulation.This issue affects JP1/Performance Management - Manager: from 09-00 before 12-50-07; JP1/Performance Management - Base: from 09-00 through 10-50-*; JP1/Performance Management - Agent Option for Application Server: from 11-00 before 11-50-16; JP1/Performance Management - Agent Option for Enterprise Applications: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for HiRDB: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for IBM Lotus Domino: from 10-00 before 11-50-16; JP1/Performance Management - Agent Option for Microsoft(R) Exchange Server: from 09-00 before  12-00-14; JP1/Performance Management - Agent Option for Microsoft(R) Internet Information Server: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for Microsoft(R) SQL Server: from 09-00 before 12-50-07; JP1/Performance Management - Agent Option for Oracle: from 09-00 before  12-10-08; JP1/Performance Management - Agent Option for Platform: from 09-00 before 12-50-07; JP1/Performance Management - Agent Option for Service Response: from 09-00 before 11-50-16; JP1/Performance Management - Agent Option for Transaction System: from 11-00 before 12-00-14; JP1/Performance Management - Remote Monitor for Microsoft(R) SQL Server: from 09-00 before 12-50-07; JP1/Performance Management - Remote Monitor for Oracle: from 09-00 before 12-10-08; JP1/Performance Management - Remote Monitor for Platform: from 09-00 before 12-10-08; JP1/Performance Management - Remote Monitor for Virtual Machine: from 10-00 before 12-50-07; JP1/Performance Management - Agent Option for Domino: from 09-00 through 09-00-*; JP1/Performance Management - Agent Option for IBM WebSphere Application Server: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for IBM WebSphere MQ: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for JP1/AJS3: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for OpenTP1: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for Oracle WebLogic Server: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for uCosminexus Application Server: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for Virtual Machine: from 09-00 through 09-01-*.

Affected (CNA)

Vendor / productVersions
Hitachi / JP1/Performance Management - Manageraffected 09-00 before 11-50; affected 11-50 before 11-50-16; affected 12-00 before 12-00-14; affected 12-10 before 12-10-08; affected 12-50 before 12-50-07
Hitachi / JP1/Performance Management - Baseaffected 09-00 through 10-50-*
Hitachi / JP1/Performance Management - Agent Option for Application Serveraffected 11-00 before 11-50-16
Hitachi / JP1/Performance Management - Agent Option for Enterprise Applicationsaffected 09-00 before 11-50; affected 11-50 before 11-50-16; affected 12-00 before 12-00-14
Hitachi / JP1/Performance Management - Agent Option for HiRDBaffected 09-00 before 11-50; affected 11-50 before 11-50-16; affected 12-00 before 12-00-14
Hitachi / JP1/Performance Management - Agent Option for IBM Lotus Dominoaffected 10-00 before 11-50-16
Hitachi / JP1/Performance Management - Agent Option for Microsoft(R) Exchange Serveraffected 09-00 before 11-50; affected 11-50 before 11-50-16; affected 12-00 before 12-00-14
Hitachi / JP1/Performance Management - Agent Option for Microsoft(R) Internet Information Serveraffected 09-00 before 11-50; affected 11-50 before 11-50-16; affected 12-00 before 12-00-14
Hitachi / JP1/Performance Management - Agent Option for Microsoft(R) SQL Serveraffected 09-00 before 11-50; affected 11-50 before 11-50-16; affected 12-00 before 12-00-14; affected 12-50 before 12-50-07
Hitachi / JP1/Performance Management - Agent Option for Oracleaffected 09-00 before 11-50; affected 11-50 before 11-50-16; affected 12-00 before 12-00-14; affected 12-10 before 12-10-08
Hitachi / JP1/Performance Management - Agent Option for Platformaffected 09-00 before 11-50; affected 11-50 before 11-50-16; affected 12-00 before 12-00-14; affected 12-50 before 12-50-07
Hitachi / JP1/Performance Management - Agent Option for Service Responseaffected 09-00 before 11-50-16
Hitachi / JP1/Performance Management - Agent Option for Transaction Systemaffected 11-00 before 11-50-16; affected 12-00 before 12-00-14
Hitachi / JP1/Performance Management - Remote Monitor for Microsoft(R) SQL Serveraffected 09-00 before 11-50; affected 11-50 before 11-50-16; affected 12-00 before 12-00-14; affected 12-50 before 12-50-07
Hitachi / JP1/Performance Management - Remote Monitor for Oracleaffected 09-00 before 11-50; affected 11-50 before 11-50-16; affected 12-00 before 12-00-14; affected 12-10 before 12-10-08
Hitachi / JP1/Performance Management - Remote Monitor for Platformaffected 09-00 before 11-50; affected 11-50 before 11-50-16; affected 12-00 before 12-00-14; affected 12-10 before 12-10-08
Hitachi / JP1/Performance Management - Remote Monitor for Virtual Machineaffected 10-00 before 11-50; affected 11-50 before 11-50-16; affected 12-00 before 12-00-14; affected 12-10 before 12-10-08; affected 12-50 before 12-50-07
Hitachi / JP1/Performance Management - Agent Option for Dominoaffected 09-00 through 09-00-*
Hitachi / JP1/Performance Management - Agent Option for IBM WebSphere Application Serveraffected 09-00 through 10-00-*
Hitachi / JP1/Performance Management - Agent Option for IBM WebSphere MQaffected 09-00 through 10-00-*
Hitachi / JP1/Performance Management - Agent Option for JP1/AJS3affected 09-00 through 10-00-*
Hitachi / JP1/Performance Management - Agent Option for OpenTP1affected 09-00 through 10-00-*
Hitachi / JP1/Performance Management - Agent Option for Oracle WebLogic Serveraffected 09-00 through 10-00-*
Hitachi / JP1/Performance Management - Agent Option for uCosminexus Application Serveraffected 09-00 through 10-00-*
Hitachi / JP1/Performance Management - Agent Option for Virtual Machineaffected 09-00 through 09-01-*

CWE

CWE-276

References

ADP enrichment

CVE

No English description supplied.