Log in Start free

Vulnerability · Published Aug 29, 2023 · Assigned by Hitachi

CVE-2023-1995Insufficient Logging Vulnerability in HiRDB

Medium 5.3

In plain English

A medium-severity security flaw in HiRDB Server from Hitachi. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.5%top 60.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before 10-06-02; HiRDB Server With Addtional Function: before 09-60-2M, before 09-65-/W , before 09-66-/Q ; HiRDB Structured Data Access Facility: before 09-60-39, before 10-03-12, before 10-04-06, before 10-06-02.

Affected products (as reported)

VendorProductVersions
Hitachi HiRDB Server 07-03 – before 09-6009-60 – before 09-60-3909-65 – before 09-65-2309-66 – before 09-66-1710-00 – through 10-00-*10-01 – before 10-01-1010-02 – through 10-02-*10-03 – before 10-03-12
Hitachi HiRDB Server With Addtional Function 07-03 – before 09-6009-60 – before 09-60-2M09-65 – before 09-65-/W09-66 – before 09-66-/Q
Hitachi HiRDB Structured Data Access Facility 07-03 – before 09-6009-60 – before 09-60-3909-65 – through 09-65-*09-66 – through 09-66-*10-00 – through 10-00-*10-01 – through 10-01-*10-02 – through 10-02-*10-03 – before 10-03-12

Weakness: CWE-778 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

References