Read the docs
TI-2025-00827 Aliases CVE-2025-0976GHSA-fv8r-cjf4-v929

Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager

Priority LOW 32CWE-532Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-532.

Summary

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.4-00; Hitachi Configuration Manager: from 8.6.1-00 before 11.0.5-00.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00179 7th percentileScored 2026-11-07
Fix Fixed Hitachi Ops Center API Configuration Manager (Hitachi): 11.0.4-00Hitachi Configuration Manager (Hitachi): 11.0.5-00

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
HitachiHitachi Ops Center API Configuration Manager10.0.0-00 to before 11.0.4-0011.0.4-00Patch availableCNA
HitachiHitachi Configuration Manager8.6.1-00 to before 11.0.5-0011.0.5-00Patch availableCNA
  • Hitachi Ops Center API Configuration Manager VendorHitachi Affected 10.0.0-00 to before 11.0.4-00 Fixed in 11.0.4-00 Patch available CNA
  • Hitachi Configuration Manager VendorHitachi Affected 8.6.1-00 to before 11.0.5-00 Fixed in 11.0.5-00 Patch available CNA

CPE configurations NVD · 5

CPEVersionsRoleVendor
cpe:2.3:a:hitachi:configuration_manager:*:*:*:*:english:*:*:*before 8.6.1-00VulnerableHitachi
cpe:2.3:a:hitachi:configuration_manager:*:*:*:*:japanese:*:*:*8.6.1-00 to before 11.0.5-00VulnerableHitachi
cpe:2.3:a:hitachi:ops_center_api_configuration_manager:*:*:*:*:english:*:*:*10.0.0-00 to before 11.0.4-00VulnerableHitachi
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*not specified by NVDRunning onLinux
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*not specified by NVDRunning onMicrosoft
  • cpe:2.3:a:hitachi:configuration_manager:*:*:*:*:english:*:*:* Versions before 8.6.1-00 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:configuration_manager:*:*:*:*:japanese:*:*:* Versions 8.6.1-00 to before 11.0.5-00 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:ops_center_api_configuration_manager:*:*:*:*:english:*:*:* Versions 10.0.0-00 to before 11.0.4-00 Vulnerable ·Hitachi
  • cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux
  • cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft

Remediation

  • Fix · CNA Hitachi Ops Center API Configuration Manager (Hitachi) Fixed in 11.0.4-00
  • Fix · CNA Hitachi Configuration Manager (Hitachi) Fixed in 11.0.5-00

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Hitachi Configuration Manager 11.0.5-00

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2025-05211 Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration ManagerPriority LOW 23
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-0976
  2. 2026-10-03 Alias added: GHSA-fv8r-cjf4-v929

References

Advisory 1

  • TI-2025-05211 Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager CVSS 3.1MEDIUM 5.2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences