Read the docs
TI-2023-03120 Aliases CVE-2023-3335GHSA-3vm4-3xxh-8fg2

Information Exposure Vulnerability in Hitachi Ops Center Administrator

Priority LOW 28CWE-532Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-532.

Summary

Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Administrator on Linux allows local users  to gain sensitive information.This issue affects Hitachi Ops Center Administrator: before 10.9.3-00.

Why it matters now

EPSS 0.00175 6th percentileScored 2026-11-07
Fix Fixed Hitachi Ops Center Administrator (Hitachi): 10.9.3-00

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
HitachiHitachi Ops Center Administratorbefore 10.9.3-0010.9.3-00Patch availableCNA
  • Hitachi Ops Center Administrator VendorHitachi Affected before 10.9.3-00 Fixed in 10.9.3-00 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:hitachi:ops_center_administrator:*:*:*:*:*:*:*:*before 10.9.3-00VulnerableHitachi
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*not specified by NVDRunning onLinux
  • cpe:2.3:a:hitachi:ops_center_administrator:*:*:*:*:*:*:*:* Versions before 10.9.3-00 Vulnerable ·Hitachi
  • cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux

Remediation

  • Fix · CNA Hitachi Ops Center Administrator (Hitachi) Fixed in 10.9.3-00

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-3335
  2. 2026-10-03 Alias added: GHSA-3vm4-3xxh-8fg2

References

Advisory 1

  • TI-2026-00894 Open Redirect Vulnerability in Hitachi Ops Center Administrator CVSS 3.1MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences