Vulnerability-Lookup

JVNDB-2026-004811

Vulnerability from jvndb - Published: 2026-02-26 11:02 - Updated:2026-02-26 11:02

Severity

4.7 (Medium) - cvssV3_0 - CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Summary

Vulnerability in Hitachi Configuration Manager and Hitachi Ops Center API Configuration Manager

Details

Credential storage vulnerability exists in Hitachi Configuration Manager and Hitachi Ops Center API Configuration Manager (CVE-2025-0976).

References

Type

URL

CVE

https://www.cve.org/CVERecord?id=CVE-2025-0976

Impacted products

Vendor

Product

	Hitachi, Ltd	Hitachi Configuration Manager
	Hitachi, Ltd	Hitachi Ops Center API Configuration Manager

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-004811.html",
  "dc:date": "2026-02-26T11:02+09:00",
  "dcterms:issued": "2026-02-26T11:02+09:00",
  "dcterms:modified": "2026-02-26T11:02+09:00",
  "description": "Credential storage vulnerability exists in Hitachi Configuration Manager and Hitachi Ops Center API Configuration Manager (CVE-2025-0976).",
  "link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-004811.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:configuration_manager",
      "@product": "Hitachi Configuration Manager",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:hitachi:hitachi_ops_center_api_configuration_manager",
      "@product": "Hitachi Ops Center API Configuration Manager",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "4.7",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2026-004811",
  "sec:references": {
    "#text": "https://www.cve.org/CVERecord?id=CVE-2025-0976",
    "@id": "CVE-2025-0976",
    "@source": "CVE"
  },
  "title": "Vulnerability in Hitachi Configuration Manager and Hitachi Ops Center API Configuration Manager"
}

CVE-2025-0976 (GCVE-0-2025-0976)

Vulnerability from cvelistv5 – Published: 2026-02-25 04:17 – Updated: 2026-02-25 14:49

Title

Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager

Summary

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.4-00; Hitachi Configuration Manager: from 8.6.1-00 before 11.0.5-00.

Severity

4.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-532 - Insertion of Sensitive Information into Log File

Assigner

Hitachi

References

1 reference

URL	Tags
https://www.hitachi.com/products/it/software/secu…	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Hitachi	Hitachi Ops Center API Configuration Manager	Affected: 10.0.0-00 , < 11.0.4-00 (custom)
Hitachi	Hitachi Configuration Manager	Affected: 8.6.1-00 , < 11.0.5-00 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-0976",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-25T14:49:36.303623Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-25T14:49:52.515Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux"
          ],
          "product": "Hitachi Ops Center API Configuration Manager",
          "vendor": "Hitachi",
          "versions": [
            {
              "changes": [
                {
                  "at": "11.0.4-00",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.0.4-00",
              "status": "affected",
              "version": "10.0.0-00",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux"
          ],
          "product": "Hitachi Configuration Manager",
          "vendor": "Hitachi",
          "versions": [
            {
              "changes": [
                {
                  "at": "11.0.5-00",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.0.5-00",
              "status": "affected",
              "version": "8.6.1-00",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Information Exposure Vulnerability in\u0026nbsp;Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager.\u003cp\u003eThis issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.4-00; Hitachi Configuration Manager: from 8.6.1-00 before 11.0.5-00.\u003c/p\u003e"
            }
          ],
          "value": "Information Exposure Vulnerability in\u00a0Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.4-00; Hitachi Configuration Manager: from 8.6.1-00 before 11.0.5-00."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-569",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-569 Collect Data as Provided by Users"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "CWE-532 Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-25T04:17:58.080Z",
        "orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
        "shortName": "Hitachi"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-110/index.html"
        }
      ],
      "source": {
        "advisory": "hitachi-sec-2026-110",
        "discovery": "UNKNOWN"
      },
      "title": "Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
    "assignerShortName": "Hitachi",
    "cveId": "CVE-2025-0976",
    "datePublished": "2026-02-25T04:17:58.080Z",
    "dateReserved": "2025-02-03T05:28:11.381Z",
    "dateUpdated": "2026-02-25T14:49:52.515Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

JVNDB-2026-004811

CVE-2025-0976 (GCVE-0-2025-0976)

Tags

Sightings

Nomenclature