CVE-2022-34881 | ByteOS Network

Vulnerability Details :

CVE-2022-34881

Assigner-Hitachi

Assigner Org ID-50d0f415-c707-4733-9afc-8f6c0e9b3f82

Published At-06 Dec, 2022 | 01:30

Updated At-23 Apr, 2025 | 13:55

Information Exposure Vulnerability in JP1/Automatic Operation

Generation of Error Message Containing Sensitive Information vulnerability in Hitachi JP1/Automatic Operation allows local users to gain sensitive information. This issue affects JP1/Automatic Operation: from 10-00 through 10-54-03, from 11-00 before 11-51-09, from 12-00 before 12-60-01.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:Hitachi

Assigner Org ID:50d0f415-c707-4733-9afc-8f6c0e9b3f82

Published At:06 Dec, 2022 | 01:30

Updated At:23 Apr, 2025 | 13:55

▼CVE Numbering Authority (CNA)

Information Exposure Vulnerability in JP1/Automatic Operation

Generation of Error Message Containing Sensitive Information vulnerability in Hitachi JP1/Automatic Operation allows local users to gain sensitive information. This issue affects JP1/Automatic Operation: from 10-00 through 10-54-03, from 11-00 before 11-51-09, from 12-00 before 12-60-01.

Affected Products

Vendor

Product

JP1/Automatic Operation

Platforms

Windows

Default Status

unaffected

Versions

Affected

From 10-00 through 10-54-03 (custom)
From 11-00 before 11-51-09 (custom)
- -> unaffectedfrom11-51-09
From 12-00 before 12-60-01 (custom)
- -> unaffectedfrom12-60-01

Vendor

Product

JP1/Automatic Operation

Platforms

Linux

Default Status

unaffected

Versions

Affected

From 10-52 through 10-54-03 (custom)
From 11-00 before 11-51-09 (custom)
- -> unaffectedfrom11-51-09
From 12-00 before 12-60-01 (custom)
- -> unaffectedfrom12-60-01

Problem Types

Type	CWE ID	Description
CWE	CWE-209	CWE-209 Generation of Error Message Containing Sensitive Information

Type: CWE

CWE ID: CWE-209

Description: CWE-209 Generation of Error Message Containing Sensitive Information

Metrics

Version	Base score	Base severity	Vector
3.1	3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Version: 3.1

Base score: 3.3

Base severity: LOW

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Impacts

CAPEC ID	Description
CAPEC-114	CAPEC-114 Authentication Abuse

CAPEC ID: CAPEC-114

Description: CAPEC-114 Authentication Abuse

References

Hyperlink	Resource
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-140/index.html	vendor-advisory

Hyperlink: https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-140/index.html

Resource:

vendor-advisory

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-140/index.html	vendor-advisory x_transferred

Hyperlink: https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-140/index.html

Resource:

vendor-advisory

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

Source:hirt@hitachi.co.jp

Published At:06 Dec, 2022 | 02:15

Updated At:07 Nov, 2023 | 03:48

Generation of Error Message Containing Sensitive Information vulnerability in Hitachi JP1/Automatic Operation allows local users to gain sensitive information. This issue affects JP1/Automatic Operation: from 10-00 through 10-54-03, from 11-00 before 11-51-09, from 12-00 before 12-60-01.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Secondary	3.1	3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Type: Primary

Version: 3.1

Base score: 3.3

Base severity: LOW

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Type: Secondary

Version: 3.1

Base score: 3.3

Base severity: LOW

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CPE Matches

>>jp1\/automatic_operation>>Versions from 10-00(inclusive) to 10-00-02(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 10-10(inclusive) to 10-10-01(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 10-12(inclusive) to 10-12-05(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 10-13(inclusive) to 10-13-04(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 10-52(inclusive) to 10-52-05(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 10-53(inclusive) to 10-53-03(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 10-54(inclusive) to 10-54-03(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 11-00(inclusive) to 11-00-05(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 11-01(inclusive) to 11-01-03(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 11-02(inclusive) to 11-02-01(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 11-10(inclusive) to 11-10-07(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 11-11(inclusive) to 11-11-05(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 11-12(inclusive) to 11-12-04(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 11-51(inclusive) to 11-51-08(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 12-00(inclusive) to 12-00-01(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 12-01(inclusive) to 12-01-02(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 12-10(inclusive) to 12-10-02(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 12-50(inclusive) to 12-50-01(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>10-01

cpe:2.3:a:hitachi:jp1\/automatic_operation:10-01:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>10-02

cpe:2.3:a:hitachi:jp1\/automatic_operation:10-02:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>10-11

cpe:2.3:a:hitachi:jp1\/automatic_operation:10-11:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>10-50

cpe:2.3:a:hitachi:jp1\/automatic_operation:10-50:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>10-51

cpe:2.3:a:hitachi:jp1\/automatic_operation:10-51:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>11-50

cpe:2.3:a:hitachi:jp1\/automatic_operation:11-50:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>12-60

cpe:2.3:a:hitachi:jp1\/automatic_operation:12-60:*:*:*:*:*:*:*

Microsoft Corporation

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 10-52(inclusive) to 10-52-05(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 10-53(inclusive) to 10-53-03(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 10-54(inclusive) to 10-54-03(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 11-00(inclusive) to 11-00-05(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 11-01(inclusive) to 11-01-03(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 11-02(inclusive) to 11-02-01(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 11-10(inclusive) to 11-10-06(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 11-11(inclusive) to 11-11-04(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 11-12(inclusive) to 11-12-03(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 11-51(inclusive) to 11-51-08(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 12-00(inclusive) to 12-00-01(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 12-01(inclusive) to 12-01-02(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 12-10(inclusive) to 12-10-02(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>Versions from 12-50(inclusive) to 12-50-01(inclusive)

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>11-50

cpe:2.3:a:hitachi:jp1\/automatic_operation:11-50:*:*:*:*:*:*:*

>>jp1\/automatic_operation>>12-60

cpe:2.3:a:hitachi:jp1\/automatic_operation:12-60:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>-

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-209	Primary	nvd@nist.gov
CWE-209	Secondary	hirt@hitachi.co.jp

CWE ID: CWE-209

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-209

Type: Secondary

Source: hirt@hitachi.co.jp

References

Hyperlink	Source	Resource
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-140/index.html	hirt@hitachi.co.jp	Vendor Advisory

Hyperlink: https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-140/index.html

Source: hirt@hitachi.co.jp

Resource:

Vendor Advisory