CVE-2014-4188
Published Jun 17, 2014
Last updated 9 years ago
Overview
- Description
- Cross-site request forgery (CSRF) vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-352
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:jp1\\/performance_management-manager_web_option:07-00:*:*:*:*:solaris:*:*",
"vulnerable": true,
"matchCriteriaId": "C2D6F82F-D36F-45EB-83CA-350C32B2F913"
},
{
"criteria": "cpe:2.3:a:hitachi:jp1\\/performance_management-manager_web_option:07-00:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "124F0CA3-2B4F-43BF-B436-CFCE814ED20F"
},
{
"criteria": "cpe:2.3:a:hitachi:jp1\\/performance_management-manager_web_option:07-54:*:*:*:*:solaris:*:*",
"vulnerable": true,
"matchCriteriaId": "80CD2867-EFB2-4AA8-BB4B-A86F031B32AC"
},
{
"criteria": "cpe:2.3:a:hitachi:jp1\\/performance_management-manager_web_option:07-54:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "36D09E80-3314-441A-B5CB-D07F72DC437F"
},
{
"criteria": "cpe:2.3:a:hitachi:tuning_manager:6.0.0:*:*:*:*:solaris:*:*",
"vulnerable": true,
"matchCriteriaId": "8DE9C139-F3DF-4B2C-BC5A-42218A748F0C"
},
{
"criteria": "cpe:2.3:a:hitachi:tuning_manager:6.0.0:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "1CC03C39-9C47-4517-8A99-6ADDAD4E37F9"
},
{
"criteria": "cpe:2.3:a:hitachi:tuning_manager:7.1.0:*:*:*:*:linux_kernel:*:*",
"vulnerable": true,
"matchCriteriaId": "F5DF2298-86DF-424D-AF8B-8EE72B995E1C"
},
{
"criteria": "cpe:2.3:a:hitachi:tuning_manager:7.6.1:*:*:*:*:solaris:*:*",
"vulnerable": true,
"matchCriteriaId": "E420F81C-DE06-4F50-BE36-56913E54F265"
},
{
"criteria": "cpe:2.3:a:hitachi:tuning_manager:7.6.1:05:*:*:*:solaris:*:*",
"vulnerable": true,
"matchCriteriaId": "0E99CC94-C6DF-448A-8A80-9136A89172E0"
},
{
"criteria": "cpe:2.3:a:hitachi:tuning_manager:8.0.0:*:*:*:*:linux_kernel:*:*",
"vulnerable": true,
"matchCriteriaId": "F41EA3F4-CEBD-4A0B-B2DE-0EACD4C968C6"
},
{
"criteria": "cpe:2.3:a:hitachi:tuning_manager:8.0.0:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "7224A2E2-4AD0-402C-B436-911A0576F165"
},
{
"criteria": "cpe:2.3:a:hitachi:tuning_manager:8.0.0:03:*:*:*:linux_kernel:*:*",
"vulnerable": true,
"matchCriteriaId": "C00F1AA9-E56B-4964-92EF-6A2358A12628"
},
{
"criteria": "cpe:2.3:a:hitachi:tuning_manager:8.0.0:03:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "087E89B5-288B-4377-83C4-633AC797FAA1"
}
],
"operator": "OR"
}
]
}
]