Missing Authentication for Critical Function Vulnerability in HiRDB
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fixed in 10-12-01
- Public exploit
- None on Exploit-DB
Summary
HiRDB Server, a database server product, and its "with Additional Function" editions are affected across several releases. Because a critical function lacks authentication checks, an attacker who can reach the server could perform privileged operations without logging in.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Affected versions
- Hitachi HiRDB Server Version 10
From 10-00 · fixed in 10-12-01
- Hitachi HiRDB Server Version 9
From 09-00 · through 09-66-22
- Hitachi HiRDB Server with Additional Function Version 9
From 09-00 · through 09-66/V
- Hitachi HiRDB Server Version 9(32)
From 09-02 · through 09-66-22
- Hitachi HiRDB Server with Additional Function Version 9(32)
From 09-00 · through 09-66-/V