CVE-2014-4188

Published: Jun 17, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected (13)

Products: Hitachi: Jp1/performance Management Manager Web Option, Tuning Manager

Hitachi

2 products

Jp1/performance Management Manager Web Option

Tuning Manager

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Hitachi Jp1/performance Management Manager Web Option	Version 07-00
Hitachi Jp1/performance Management Manager Web Option	Version 07-00
Hitachi Jp1/performance Management Manager Web Option	Version 07-54
Hitachi Jp1/performance Management Manager Web Option	Version 07-54
Hitachi Tuning Manager	Version 6.0.0
Hitachi Tuning Manager	Version 6.0.0
Hitachi Tuning Manager	Version 7.1.0
Hitachi Tuning Manager	Version 7.6.1
Hitachi Tuning Manager	Version 7.6.1 05
Hitachi Tuning Manager	Version 8.0.0
Hitachi Tuning Manager	Version 8.0.0
Hitachi Tuning Manager	Version 8.0.0 03
Hitachi Tuning Manager	Version 8.0.0 03