CVE-2022-34881 : Generation of Error Message Containing Sensitive Information vulnerability in Hi

Generation of Error Message Containing Sensitive Information vulnerability in Hitachi JP1/Automatic Operation allows local users to gain sensitive information. This issue affects JP1/Automatic Operation: from 10-00 through 10-54-03, from 11-00 before 11-51-09, from 12-00 before 12-60-01.

Published 2022-12-06 02:15:10

Updated 2023-03-24 18:25:14

Source Hitachi, Ltd.

View at NVD, CVE.org

Products affected by CVE-2022-34881

Hitachi » Jp1/automatic Operation
Versions from including (>=) 12-00 and up to, including, (<=) 12-00-01
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 10-00 and up to, including, (<=) 10-00-02
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 11-00 and up to, including, (<=) 11-00-05
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 11-10 and up to, including, (<=) 11-10-06
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 12-10 and up to, including, (<=) 12-10-02
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 10-13 and up to, including, (<=) 10-13-04
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 11-11 and up to, including, (<=) 11-11-05
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 10-53 and up to, including, (<=) 10-53-03
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 11-12 and up to, including, (<=) 11-12-04
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 11-11 and up to, including, (<=) 11-11-04
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 12-50 and up to, including, (<=) 12-50-01
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 11-10 and up to, including, (<=) 11-10-07
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 11-12 and up to, including, (<=) 11-12-03
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 10-54 and up to, including, (<=) 10-54-03
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 10-10 and up to, including, (<=) 10-10-01
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 12-01 and up to, including, (<=) 12-01-02
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 11-01 and up to, including, (<=) 11-01-03
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 11-51 and up to, including, (<=) 11-51-08
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 10-52 and up to, including, (<=) 10-52-05
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 11-02 and up to, including, (<=) 11-02-01
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation
Versions from including (>=) 10-12 and up to, including, (<=) 10-12-05
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation » Version: 12-60
cpe:2.3:a:hitachi:jp1\/automatic_operation:12-60:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation » Version: 11-50
cpe:2.3:a:hitachi:jp1\/automatic_operation:11-50:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation » Version: 10-50
cpe:2.3:a:hitachi:jp1\/automatic_operation:10-50:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation » Version: 10-51
cpe:2.3:a:hitachi:jp1\/automatic_operation:10-51:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation » Version: 10-11
cpe:2.3:a:hitachi:jp1\/automatic_operation:10-11:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation » Version: 10-02
cpe:2.3:a:hitachi:jp1\/automatic_operation:10-02:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Hitachi » Jp1/automatic Operation » Version: 10-01
cpe:2.3:a:hitachi:jp1\/automatic_operation:10-01:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-34881

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 15 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-34881

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	1.8	1.4	Hitachi, Ltd.
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	1.8	1.4	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

CWE ids for CVE-2022-34881

CWE-209 Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.
Assigned by:
- hirt@hitachi.co.jp (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2022-34881

https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-140/index.html

Information Exposure Vulnerability in JP1/Automatic Operation: Software Vulnerability Information: Software: Hitachi
Vendor Advisory

Jump to

Vulnerability Details : CVE-2022-34881

Products affected by CVE-2022-34881

Exploit prediction scoring system (EPSS) score for CVE-2022-34881

CVSS scores for CVE-2022-34881

CWE ids for CVE-2022-34881

References for CVE-2022-34881