Insufficient Logging Vulnerability in HiRDB

Summary

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before 10-06-02; HiRDB Server With Addtional Function: before 09-60-2M, before 09-65-/W , before 09-66-/Q ; HiRDB Structured Data Access Facility: before 09-60-39, before 10-03-12, before 10-04-06, before 10-06-02.

Timeline

1. Aug 29, 2023, 1:06 AM UTCCVE published
2. Sep 30, 2024, 5:43 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Sep 30, 2024, 5:47 PM UTCRecord last updated

Affected versions

• Hitachi HiRDB Server

  From 07-03 · fixed in 09-60; From 09-60 · fixed in 09-60-39; From 09-65 · fixed in 09-65-23; From 09-66 · fixed in 09-66-17; From 10-00; From 10-01 · fixed in 10-01-10; From 10-02; From 10-03 · fixed in 10-03-12; From 10-04 · fixed in 10-04-06; From 10-05 · fixed in 10-05-06; From 10-06 · fixed in 10-06-02

• Hitachi HiRDB Server With Addtional Function

  From 07-03 · fixed in 09-60; From 09-60 · fixed in 09-60-2M; From 09-65 · fixed in 09-65-/W; From 09-66 · fixed in 09-66-/Q

• Hitachi HiRDB Structured Data Access Facility

  From 07-03 · fixed in 09-60; From 09-60 · fixed in 09-60-39; From 09-65; From 09-66; From 10-00; From 10-01; From 10-02; From 10-03 · fixed in 10-03-12; From 10-04 · fixed in 10-04-06; From 10-05; From 10-06 · fixed in 10-06-02

References 1