CVE-2023-3440

Summary

Incorrect Default Permissions vulnerability in Hitachi JP1/Performance Management on Windows allows File Manipulation.This issue affects JP1/Performance Management - Manager: from 09-00 before 12-50-07; JP1/Performance Management - Base: from 09-00 through 10-50-; JP1/Performance Management - Agent Option for Application Server: from 11-00 before 11-50-16; JP1/Performance Management - Agent Option for Enterprise Applications: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for HiRDB: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for IBM Lotus Domino: from 10-00 before 11-50-16; JP1/Performance Management - Agent Option for Microsoft(R) Exchange Server: from 09-00 before  12-00-14; JP1/Performance Management - Agent Option for Microsoft(R) Internet Information Server: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for Microsoft(R) SQL Server: from 09-00 before 12-50-07; JP1/Performance Management - Agent Option for Oracle: from 09-00 before  12-10-08; JP1/Performance Management - Agent Option for Platform: from 09-00 before 12-50-07; JP1/Performance Management - Agent Option for Service Response: from 09-00 before 11-50-16; JP1/Performance Management - Agent Option for Transaction System: from 11-00 before 12-00-14; JP1/Performance Management - Remote Monitor for Microsoft(R) SQL Server: from 09-00 before 12-50-07; JP1/Performance Management - Remote Monitor for Oracle: from 09-00 before 12-10-08; JP1/Performance Management - Remote Monitor for Platform: from 09-00 before 12-10-08; JP1/Performance Management - Remote Monitor for Virtual Machine: from 10-00 before 12-50-07; JP1/Performance Management - Agent Option for Domino: from 09-00 through 09-00-; JP1/Performance Management - Agent Option for IBM WebSphere Application Server: from 09-00 through 10-00-; JP1/Performance Management - Agent Option for IBM WebSphere MQ: from 09-00 through 10-00-; JP1/Performance Management - Agent Option for JP1/AJS3: from 09-00 through 10-00-; JP1/Performance Management - Agent Option for OpenTP1: from 09-00 through 10-00-; JP1/Performance Management - Agent Option for Oracle WebLogic Server: from 09-00 through 10-00-; JP1/Performance Management - Agent Option for uCosminexus Application Server: from 09-00 through 10-00-; JP1/Performance Management - Agent Option for Virtual Machine: from 09-00 through 09-01-*.

Affected Software

VendorProductVersion RangeStatus
HitachiJP1/Performance Management - Manager09-00 < 11-50affected
HitachiJP1/Performance Management - Manager11-50 < 11-50-16affected
HitachiJP1/Performance Management - Manager12-00 < 12-00-14affected
HitachiJP1/Performance Management - Manager12-10 < 12-10-08affected
HitachiJP1/Performance Management - Manager12-50 < 12-50-07affected
HitachiJP1/Performance Management - Base09-00 <= 10-50-*affected
HitachiJP1/Performance Management - Agent Option for Application Server11-00 < 11-50-16affected
HitachiJP1/Performance Management - Agent Option for Enterprise Applications09-00 < 11-50affected
HitachiJP1/Performance Management - Agent Option for Enterprise Applications11-50 < 11-50-16affected
HitachiJP1/Performance Management - Agent Option for Enterprise Applications12-00 < 12-00-14affected
HitachiJP1/Performance Management - Agent Option for HiRDB09-00 < 11-50affected
HitachiJP1/Performance Management - Agent Option for HiRDB11-50 < 11-50-16affected
HitachiJP1/Performance Management - Agent Option for HiRDB12-00 < 12-00-14affected
HitachiJP1/Performance Management - Agent Option for IBM Lotus Domino10-00 < 11-50-16affected
HitachiJP1/Performance Management - Agent Option for Microsoft(R) Exchange Server09-00 < 11-50affected
HitachiJP1/Performance Management - Agent Option for Microsoft(R) Exchange Server11-50 < 11-50-16affected
HitachiJP1/Performance Management - Agent Option for Microsoft(R) Exchange Server12-00 < 12-00-14affected
HitachiJP1/Performance Management - Agent Option for Microsoft(R) Internet Information Server09-00 < 11-50affected
HitachiJP1/Performance Management - Agent Option for Microsoft(R) Internet Information Server11-50 < 11-50-16affected
HitachiJP1/Performance Management - Agent Option for Microsoft(R) Internet Information Server12-00 < 12-00-14affected
HitachiJP1/Performance Management - Agent Option for Microsoft(R) SQL Server09-00 < 11-50affected
HitachiJP1/Performance Management - Agent Option for Microsoft(R) SQL Server11-50 < 11-50-16affected
HitachiJP1/Performance Management - Agent Option for Microsoft(R) SQL Server12-00 < 12-00-14affected
HitachiJP1/Performance Management - Agent Option for Microsoft(R) SQL Server12-50 < 12-50-07affected
HitachiJP1/Performance Management - Agent Option for Oracle09-00 < 11-50affected
HitachiJP1/Performance Management - Agent Option for Oracle11-50 < 11-50-16affected
HitachiJP1/Performance Management - Agent Option for Oracle12-00 < 12-00-14affected
HitachiJP1/Performance Management - Agent Option for Oracle12-10 < 12-10-08affected
HitachiJP1/Performance Management - Agent Option for Platform09-00 < 11-50affected
HitachiJP1/Performance Management - Agent Option for Platform11-50 < 11-50-16affected
HitachiJP1/Performance Management - Agent Option for Platform12-00 < 12-00-14affected
HitachiJP1/Performance Management - Agent Option for Platform12-50 < 12-50-07affected
HitachiJP1/Performance Management - Agent Option for Service Response09-00 < 11-50-16affected
HitachiJP1/Performance Management - Agent Option for Transaction System11-00 < 11-50-16affected
HitachiJP1/Performance Management - Agent Option for Transaction System12-00 < 12-00-14affected
HitachiJP1/Performance Management - Remote Monitor for Microsoft(R) SQL Server09-00 < 11-50affected
HitachiJP1/Performance Management - Remote Monitor for Microsoft(R) SQL Server11-50 < 11-50-16affected
HitachiJP1/Performance Management - Remote Monitor for Microsoft(R) SQL Server12-00 < 12-00-14affected
HitachiJP1/Performance Management - Remote Monitor for Microsoft(R) SQL Server12-50 < 12-50-07affected
HitachiJP1/Performance Management - Remote Monitor for Oracle09-00 < 11-50affected
HitachiJP1/Performance Management - Remote Monitor for Oracle11-50 < 11-50-16affected
HitachiJP1/Performance Management - Remote Monitor for Oracle12-00 < 12-00-14affected
HitachiJP1/Performance Management - Remote Monitor for Oracle12-10 < 12-10-08affected
HitachiJP1/Performance Management - Remote Monitor for Platform09-00 < 11-50affected
HitachiJP1/Performance Management - Remote Monitor for Platform11-50 < 11-50-16affected
HitachiJP1/Performance Management - Remote Monitor for Platform12-00 < 12-00-14affected
HitachiJP1/Performance Management - Remote Monitor for Platform12-10 < 12-10-08affected
HitachiJP1/Performance Management - Remote Monitor for Virtual Machine10-00 < 11-50affected
HitachiJP1/Performance Management - Remote Monitor for Virtual Machine11-50 < 11-50-16affected
HitachiJP1/Performance Management - Remote Monitor for Virtual Machine12-00 < 12-00-14affected
HitachiJP1/Performance Management - Remote Monitor for Virtual Machine12-10 < 12-10-08affected
HitachiJP1/Performance Management - Remote Monitor for Virtual Machine12-50 < 12-50-07affected
HitachiJP1/Performance Management - Agent Option for Domino09-00 <= 09-00-*affected
HitachiJP1/Performance Management - Agent Option for IBM WebSphere Application Server09-00 <= 10-00-*affected
HitachiJP1/Performance Management - Agent Option for IBM WebSphere MQ09-00 <= 10-00-*affected
HitachiJP1/Performance Management - Agent Option for JP1/AJS309-00 <= 10-00-*affected
HitachiJP1/Performance Management - Agent Option for OpenTP109-00 <= 10-00-*affected
HitachiJP1/Performance Management - Agent Option for Oracle WebLogic Server09-00 <= 10-00-*affected
HitachiJP1/Performance Management - Agent Option for uCosminexus Application Server09-00 <= 10-00-*affected
HitachiJP1/Performance Management - Agent Option for Virtual Machine09-00 <= 09-01-*affected

Weaknesses

  • CWE-276: CWE-276 Incorrect Default Permissions

ADP Enrichment

CVE Program Container

Additional References

References