CVE-2022-4895

HIGH

Hitachi Infrastructure Analytics Advisor <4.4.0 - Man in the Middle...

Title source: llm
STIX 2.1

Description

Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component) allows Man in the Middle Attack.This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.1-00.

References (1)

Core 1

Scores

CVSS v3 8.6
EPSS 0.0021
EPSS Percentile 43.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-295
Status published
Products (2)
hitachi/infrastructure_analytics_advisor 2.0.0-00 - 10.9.1-00
hitachi/ops_center_analyzer 10.0.0-00 - 10.9.1-00
Published Feb 28, 2023
Tracked Since Feb 18, 2026