← Back

CVE-2025-5781

nvd nist
Published: Feb 25, 2026Modified: Jun 17, 2026

JSON object

Loading...
5.2
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Exploitability: 2.0 / Impact: 2.7
Source: NVD

Description

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.

Affected (4)

Hitachi
3 products
Configuration Manager
Device Manager
Ops Center Api Configuration Manager
Configuration A
4 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Hitachi
Configuration Manager
From 8.5.1-00
Configuration Manager
From 8.5.1-00 to 11.0.5-00
Device Manager
From 8.4.1-00 to 8.6.5-00
Ops Center Api Configuration Manager
From 10.0.0-00 to 11.0.5-00
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-532
Insertion of Sensitive Information into Log File
Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (1)

Source: hirt@hitachi.co.jp
Vendor Advisory

Timeline

No history available yet.