2 lines
3.7 KiB
JSON
2 lines
3.7 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Windows","Linux","Solaris"],"product":"Hitachi Replication Manager","vendor":"Hitachi","versions":[{"changes":[{"at":"8.8.5-02","status":"unaffected"}],"lessThan":"8.8.5-02","status":"affected","version":"0","versionType":"custom"}]}],"source":"hirt@hitachi.co.jp"},{"affectedData":[{"cpes":["cpe:2.3:a:hitachi:replication_manager:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"replication_manager","vendor":"hitachi","versions":[{"lessThan":"8.8.5-02","status":"affected","version":"0","versionType":"custom"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:hitachi:replication_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"C12A2776-0CB0-4A79-9437-11C3391F9E29","versionEndExcluding":"8.8.5-02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA","vulnerable":false},{"criteria":"cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*","matchCriteriaId":"91F372EA-3A78-4703-A457-751B2C98D796","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Expression Language Injection vulnerability in Hitachi Replication Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Replication Manager: before 8.8.5-02.\n\n"},{"lang":"es","value":"Vulnerabilidad de inyección de lenguaje de expresión en Hitachi Replication Manager en Windows, Linux, Solaris permite la inyección de código. Este problema afecta a Hitachi Replication Manager: antes de 8.8.5-02."}],"id":"CVE-2022-4146","lastModified":"2026-11-10T12:10:00.177","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.4,"source":"hirt@hitachi.co.jp","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-4146","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-10-28T18:16:18.698904Z","version":"2.0.3"}}]},"published":"2023-07-18T03:15:55.067","references":[{"source":"hirt@hitachi.co.jp","tags":["Vendor Advisory"],"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-123/index.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-123/index.html"}],"sourceIdentifier":"hirt@hitachi.co.jp","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-917"}],"source":"hirt@hitachi.co.jp","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-917"}],"source":"nvd@nist.gov","type":"Primary"}]}
|