Skip to main content
← All vulnerabilities
CVE-2023-3440

File and Directory Permission Vulnerability in JP1/Performance Management

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 11-50, 11-50-16, 12-00-14, 12-10-08, 12-50-07
None on Exploit-DB, Metasploit or GitHub

Summary

Incorrect Default Permissions vulnerability in Hitachi JP1/Performance Management on Windows allows File Manipulation.This issue affects JP1/Performance Management - Manager: from 09-00 before 12-50-07; JP1/Performance Management - Base: from 09-00 through 10-50-*; JP1/Performance Management - Agent Option for Application Server: from 11-00 before 11-50-16; JP1/Performance Management - Agent Option for Enterprise Applications: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for HiRDB: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for IBM Lotus Domino: from 10-00 before 11-50-16; JP1/Performance Management - Agent Option for Microsoft(R) Exchange Server: from 09-00 before  12-00-14; JP1/Performance Management - Agent Option for Microsoft(R) Internet Information Server: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for Microsoft(R) SQL Server: from 09-00 before 12-50-07; JP1/Performance Management - Agent Option for Oracle: from 09-00 before  12-10-08; JP1/Performance Management - Agent Option for Platform: from 09-00 before 12-50-07; JP1/Performance Management - Agent Option for Service Response: from 09-00 before 11-50-16; JP1/Performance Management - Agent Option for Transaction System: from 11-00 before 12-00-14; JP1/Performance Management - Remote Monitor for Microsoft(R) SQL Server: from 09-00 before 12-50-07; JP1/Performance Management - Remote Monitor for Oracle: from 09-00 before 12-10-08; JP1/Performance Management - Remote Monitor for Platform: from 09-00 before 12-10-08; JP1/Performance Management - Remote Monitor for Virtual Machine: from 10-00 before 12-50-07; JP1/Performance Management - Agent Option for Domino: from 09-00 through 09-00-*; JP1/Performance Management - Agent Option for IBM WebSphere Application Server: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for IBM WebSphere MQ: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for JP1/AJS3: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for OpenTP1: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for Oracle WebLogic Server: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for uCosminexus Application Server: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for Virtual Machine: from 09-00 through 09-01-*.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Hitachi JP1/Performance Management - Manager

    From 09-00 · fixed in 11-50; From 11-50 · fixed in 11-50-16; From 12-00 · fixed in 12-00-14; From 12-10 · fixed in 12-10-08; From 12-50 · fixed in 12-50-07

  • Hitachi JP1/Performance Management - Base

    From 09-00

  • Hitachi JP1/Performance Management - Agent Option for Application Server

    From 11-00 · fixed in 11-50-16

  • Hitachi JP1/Performance Management - Agent Option for Enterprise Applications

    From 09-00 · fixed in 11-50; From 11-50 · fixed in 11-50-16; From 12-00 · fixed in 12-00-14

  • Hitachi JP1/Performance Management - Agent Option for HiRDB

    From 09-00 · fixed in 11-50; From 11-50 · fixed in 11-50-16; From 12-00 · fixed in 12-00-14

  • Hitachi JP1/Performance Management - Agent Option for IBM Lotus Domino

    From 10-00 · fixed in 11-50-16

  • Hitachi JP1/Performance Management - Agent Option for Microsoft(R) Exchange Server

    From 09-00 · fixed in 11-50; From 11-50 · fixed in 11-50-16; From 12-00 · fixed in 12-00-14

  • Hitachi JP1/Performance Management - Agent Option for Microsoft(R) Internet Information Server

    From 09-00 · fixed in 11-50; From 11-50 · fixed in 11-50-16; From 12-00 · fixed in 12-00-14

  • Hitachi JP1/Performance Management - Agent Option for Microsoft(R) SQL Server

    From 09-00 · fixed in 11-50; From 11-50 · fixed in 11-50-16; From 12-00 · fixed in 12-00-14; From 12-50 · fixed in 12-50-07

  • Hitachi JP1/Performance Management - Agent Option for Oracle

    From 09-00 · fixed in 11-50; From 11-50 · fixed in 11-50-16; From 12-00 · fixed in 12-00-14; From 12-10 · fixed in 12-10-08

  • Hitachi JP1/Performance Management - Agent Option for Platform

    From 09-00 · fixed in 11-50; From 11-50 · fixed in 11-50-16; From 12-00 · fixed in 12-00-14; From 12-50 · fixed in 12-50-07

  • Hitachi JP1/Performance Management - Agent Option for Service Response

    From 09-00 · fixed in 11-50-16

  • Hitachi JP1/Performance Management - Agent Option for Transaction System

    From 11-00 · fixed in 11-50-16; From 12-00 · fixed in 12-00-14

  • Hitachi JP1/Performance Management - Remote Monitor for Microsoft(R) SQL Server

    From 09-00 · fixed in 11-50; From 11-50 · fixed in 11-50-16; From 12-00 · fixed in 12-00-14; From 12-50 · fixed in 12-50-07

  • Hitachi JP1/Performance Management - Remote Monitor for Oracle

    From 09-00 · fixed in 11-50; From 11-50 · fixed in 11-50-16; From 12-00 · fixed in 12-00-14; From 12-10 · fixed in 12-10-08

  • Hitachi JP1/Performance Management - Remote Monitor for Platform

    From 09-00 · fixed in 11-50; From 11-50 · fixed in 11-50-16; From 12-00 · fixed in 12-00-14; From 12-10 · fixed in 12-10-08

  • Hitachi JP1/Performance Management - Remote Monitor for Virtual Machine

    From 10-00 · fixed in 11-50; From 11-50 · fixed in 11-50-16; From 12-00 · fixed in 12-00-14; From 12-10 · fixed in 12-10-08; From 12-50 · fixed in 12-50-07

  • Hitachi JP1/Performance Management - Agent Option for Domino

    From 09-00

  • Hitachi JP1/Performance Management - Agent Option for IBM WebSphere Application Server

    From 09-00

  • Hitachi JP1/Performance Management - Agent Option for IBM WebSphere MQ

    From 09-00

  • Hitachi JP1/Performance Management - Agent Option for JP1/AJS3

    From 09-00

  • Hitachi JP1/Performance Management - Agent Option for OpenTP1

    From 09-00

  • Hitachi JP1/Performance Management - Agent Option for Oracle WebLogic Server

    From 09-00

  • Hitachi JP1/Performance Management - Agent Option for uCosminexus Application Server

    From 09-00

  • Hitachi JP1/Performance Management - Agent Option for Virtual Machine

    From 09-00

References 1

hitachi.com