CVE-2022-2637

MEDIUM

Hitachi Storage Plug-in for VMware vCenter 04.8.0-04.8.9 - Authenticated Privilege Escalation

Title source: llm

Description

Incorrect Privilege Assignment vulnerability in Hitachi Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation.This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.8.0 before 04.9.0.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory

https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-131/index.html

Scores

CVSS v3 5.4

EPSS 0.0066

EPSS Percentile 71.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H

Details

CWE

CWE-266 CWE-269

Status published

Products (1)

hitachi/storage_plug-in 04.8.0

Published Oct 06, 2022

Tracked Since Feb 18, 2026