Description (CNA)
ETERNUS SF provided by Fsas Technologies Inc. contains an incorrect default permissions vulnerability. A low-privileged user with access to the management server may obtain database credentials, potentially allowing execution of OS commands with administrator privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fsas Technologies Inc. / ETERNUS SF AdvancedCopy Manager Standard Edition (for Solaris 10/ 11) | affected 15.0/ 15.1/ 15.2/ 15.3/ 16.0/ 16.1/ 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1 |
| Fsas Technologies Inc. / ETERNUS SF Storage Cruiser (for Solaris 10/ 11) | affected 15.0/ 15.1/ 15.2/ 15.3/ 16.0/ 16.1/ 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1 |
| Fsas Technologies Inc. / ETERNUS SF AdvancedCopy Manager Standard Edition (for RHEL 7/ 8/ 9) | affected 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1 |
| Fsas Technologies Inc. / ETERNUS SF Expressn (for RHEL 7/ 8/ 9) | affected 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1 |
| Fsas Technologies Inc. / ETERNUS SF Storage Cruisern (for RHEL 7/ 8/ 9) | affected 16.2/ 16.3/ 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1 |
| Fsas Technologies Inc. / ETERNUS SF AdvancedCopy Manager Standard Edition (for Windows Server 2016/ 2019/ 2022) | affected 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1 |
| Fsas Technologies Inc. / ETERNUS SF Express (for Windows Server 2016/ 2019/ 2022) | affected 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1 |
| Fsas Technologies Inc. / ETERNUS SF Storage Cruiser (for Windows Server 2016/ 2019/ 2022) | affected 16.4/ 16.5/ 16.6/ 16.7/ 16.8/ 16.9/ 16.9.1 |
CWE
CWE-276
References
- https://www.fujitsu.com/global/support/products/computing/storage/20251020/index.html
- https://www.fsastech.com/ja-jp/resources/security/2025/1020.html
- https://jvn.jp/en/jp/JVN44266462/
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.