Sign-up

ID

VAR-201003-0532


TITLE

JP1/Cm2/Network Node Manager Remote Console Insecure File Permissions Vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2010-001147

DESCRIPTION

Computer systems running the JP1/Cm2/Network Node Manager (NNM) Remote Console for Windows are vulnerable due to insecure file permissions set on the systems.A local attacker could replace the affected files provided by the NNM Remote Console with arbitrary files.

Trust: 0.8

sources: JVNDB: JVNDB-2010-001147

AFFECTED PRODUCTS

vendor:hitachimodel:jp1/cm2/network node managerscope: - version: -

Trust: 0.8

vendor:hitachimodel:jp1/cm2/network node managerscope:eqversion:250

Trust: 0.8

vendor:hitachimodel:jp1/cm2/network node managerscope:eqversion:enterprise

Trust: 0.8

vendor:hitachimodel:jp1/cm2/network node managerscope:eqversion:starter edition 250

Trust: 0.8

vendor:hitachimodel:jp1/cm2/network node managerscope:eqversion:starter edition enterprise

Trust: 0.8

sources: JVNDB: JVNDB-2010-001147

CVSS

SEVERITY

CVSSV2

CVSSV3

IPA: JVNDB-2010-001147
value: MEDIUM

Trust: 0.8

IPA: JVNDB-2010-001147
severity: MEDIUM
baseScore: 6.6
vectorString: AV:L/AC:L/AU:N/C:N/I:C/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

sources: JVNDB: JVNDB-2010-001147

PROBLEMTYPE DATA

problemtype:CWE-264

Trust: 0.8

sources: JVNDB: JVNDB-2010-001147

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2010-001147

PATCH
title:HS10-002url:http://www.hitachi.co.jp/prod/comp/soft1/global/security/info/vuls/hs10-002/index.html
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2010-001147

EXTERNAL IDS
db:JVNDBid:JVNDB-2010-001147
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2010-001147

SOURCES
db:JVNDBid:JVNDB-2010-001147

LAST UPDATE DATE
2022-05-04T09:19:25.598000+00:00

SOURCES UPDATE DATE
db:JVNDBid:JVNDB-2010-001147date:2010-03-15T00:00:00

SOURCES RELEASE DATE
db:JVNDBid:JVNDB-2010-001147date:2010-03-15T00:00:00