« Volver al listado

CVE-2026-3314

Estado: AplazadaMedia (4.6)—

Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe modules), Hitachi Ops Center Analyzer viewpoint, Hitachi Infrastructure Analytics Advisor (Data Center Analytics, Analytics probe modules).

This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.8-00; Hitachi Ops Center Analyzer viewpoint: from 10.8.1-00 before 11.0.8-00; Hitachi Infrastructure Analytics Advisor: from 3.2.0-00 before 11.0.8-00.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-3314",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-3314",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-05-26T12:21:39.028766Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "hirt@hitachi.co.jp",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.6,
          "attackVector": "PHYSICAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 0.9
      }
    ]
  },
  "affected": [
    {
      "source": "hirt@hitachi.co.jp",
      "affectedData": [
        {
          "vendor": "Hitachi",
          "modules": [
            "Hitachi Ops Center Analyzer detail view",
            "Hitachi Ops Center Analyzer probe"
          ],
          "product": "Hitachi Ops Center Analyzer",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "11.0.8-00",
                  "status": "unaffected"
                }
              ],
              "version": "10.0.0-00",
              "lessThan": "11.0.8-00",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Linux",
            "64 bit"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Hitachi",
          "product": "Hitachi Ops Center Analyzer viewpoint",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "11.0.8-00",
                  "status": "unaffected"
                }
              ],
              "version": "10.8.1-00",
              "lessThan": "11.0.8-00",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Linux",
            "64 bit"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Hitachi",
          "modules": [
            "Data Center Analytics",
            "Analytics probe"
          ],
          "product": "Hitachi Infrastructure Analytics Advisor",
          "versions": [
            {
              "status": "affected",
              "version": "3.2.0-00",
              "lessThan": "11.0.8-00",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Linux",
            "64 bit"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-05-26T07:16:18.807",
  "references": [
    {
      "url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-120/index.html",
      "source": "hirt@hitachi.co.jp"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "hirt@hitachi.co.jp",
      "description": [
        {
          "lang": "en",
          "value": "CWE-549"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe modules), Hitachi Ops Center Analyzer viewpoint, Hitachi Infrastructure Analytics Advisor (Data Center Analytics, Analytics probe modules).\n\nThis issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.8-00; Hitachi Ops Center Analyzer viewpoint: from 10.8.1-00 before 11.0.8-00; Hitachi Infrastructure Analytics Advisor: from 3.2.0-00 before 11.0.8-00."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad por falta de enmascaramiento del campo de contraseña en Hitachi Ops Center Analyzer (vista de detalles de Hitachi Ops Center Analyzer, módulos de sonda de Hitachi Ops Center Analyzer), Hitachi Ops Center Analyzer viewpoint, Hitachi Infrastructure Analytics Advisor (Análisis de centros de datos, módulos de sonda de análisis).\n\nEste problema afecta a Hitachi Ops Center Analyzer: desde 10.0.0-00 antes de 11.0.8-00; Hitachi Ops Center Analyzer viewpoint: desde 10.8.1-00 antes de 11.0.8-00; Hitachi Infrastructure Analytics Advisor: desde 3.2.0-00 antes de 11.0.8-00."
    }
  ],
  "lastModified": "2026-07-24T11:10:00.170",
  "sourceIdentifier": "hirt@hitachi.co.jp"
}