CVE-2023-1995

29.08.2023, 02:15

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23, 

before 09-66-17, 

before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before 10-06-02; HiRDB Server With Addtional Function: before 09-60-2M, before 09-65-/W

, before 09-66-/Q

; HiRDB Structured Data Access Facility: before 09-60-39, before 10-03-12, before 10-04-06, before 10-06-02.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.3 MEDIUM	NETWORK	HIGH	LOW	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Hitachi	CNA	5.3 MEDIUM	NETWORK	HIGH	LOW	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 38%

Vendor	Product	Version
hitachi	hirdb_server_with_additional_function	09-00 ≤ 𝑥 ≤ 09-00-2d
hitachi	hirdb_server_with_additional_function	09-01 ≤ 𝑥 ≤ 09-01-\/x
hitachi	hirdb_server_with_additional_function	09-02 ≤ 𝑥 ≤ 09-02-2f
hitachi	hirdb_server_with_additional_function	09-03 ≤ 𝑥 ≤ 09-03-2a
hitachi	hirdb_server_with_additional_function	09-04 ≤ 𝑥 ≤ 09-04-2s
hitachi	hirdb_server_with_additional_function	09-50 ≤ 𝑥 ≤ 09-50-2k
hitachi	hirdb_server_with_additional_function	09-60 ≤ 𝑥 ≤ 09-60-2k
hitachi	hirdb_server_with_additional_function	09-65 ≤ 𝑥 ≤ 09-65-\/v
hitachi	hirdb_server_with_additional_function	09-66 ≤ 𝑥 ≤ 09-66-\/p
hitachi	hirdb_server_with_additional_function	09-00 ≤ 𝑥 ≤ 09-00-2f
hitachi	hirdb_server_with_additional_function	09-01 ≤ 𝑥 ≤ 09-01-\/x
hitachi	hirdb_server_with_additional_function	09-02 ≤ 𝑥 ≤ 09-02-2f
hitachi	hirdb_server_with_additional_function	09-03 ≤ 𝑥 ≤ 09-03-2e
hitachi	hirdb_server_with_additional_function	09-04 ≤ 𝑥 ≤ 09-04-2s
hitachi	hirdb_server_with_additional_function	09-50 ≤ 𝑥 ≤ 09-50-2k
hitachi	hirdb_server_with_additional_function	09-60 ≤ 𝑥 ≤ 09-60-2l
hitachi	hirdb_server_with_additional_function	09-65 ≤ 𝑥 ≤ 09-65-\/v
hitachi	hirdb_server_with_additional_function	09-66 ≤ 𝑥 ≤ 09-66-\/p
hitachi	hirdb_structured_data_access_facility	09-60 ≤ 𝑥 ≤ 09-60-37
hitachi	hirdb_structured_data_access_facility	09-66 ≤ 𝑥 ≤ 09-66-06
hitachi	hirdb_structured_data_access_facility	10-01 ≤ 𝑥 ≤ 10-01-03
hitachi	hirdb_structured_data_access_facility	10-02 ≤ 𝑥 ≤ 10-02-12
hitachi	hirdb_structured_data_access_facility	10-03 ≤ 𝑥 ≤ 10-03-10
hitachi	hirdb_structured_data_access_facility	10-04 ≤ 𝑥 ≤ 10-04-05
hitachi	hirdb_structured_data_access_facility	10-06 ≤ 𝑥 ≤ 10-06-01
hitachi	hirdb_server	09-00 ≤ 𝑥 ≤ 09-00-30
hitachi	hirdb_server	09-01 ≤ 𝑥 ≤ 09-01-24
hitachi	hirdb_server	09-02 ≤ 𝑥 ≤ 09-02-32
hitachi	hirdb_server	09-03 ≤ 𝑥 ≤ 09-03-27
hitachi	hirdb_server	09-04 ≤ 𝑥 ≤ 09-04-31
hitachi	hirdb_server	09-00 ≤ 𝑥 ≤ 09-00-32
hitachi	hirdb_server	09-01 ≤ 𝑥 ≤ 09-01-24
hitachi	hirdb_server	09-02 ≤ 𝑥 ≤ 09-02-32
hitachi	hirdb_server	09-03 ≤ 𝑥 ≤ 09-03-31
hitachi	hirdb_server	09-04 ≤ 𝑥 ≤ 09-04-45
hitachi	hirdb_server	09-50 ≤ 𝑥 ≤ 09-50-37
hitachi	hirdb_server	09-60 ≤ 𝑥 ≤ 09-60-38
hitachi	hirdb_server	09-65 ≤ 𝑥 ≤ 09-65-22
hitachi	hirdb_server	09-66 ≤ 𝑥 ≤ 09-66-16
hitachi	hirdb_server	10-00 ≤ 𝑥 ≤ 10-00-09
hitachi	hirdb_server	10-01 ≤ 𝑥 ≤ 10-01-09
hitachi	hirdb_server	10-02 ≤ 𝑥 ≤ 10-02-12
hitachi	hirdb_server	10-03 ≤ 𝑥 ≤ 10-03-11
hitachi	hirdb_server	10-04 ≤ 𝑥 ≤ 10-04-04
hitachi	hirdb_server	10-05 ≤ 𝑥 ≤ 10-05-05
hitachi	hirdb_server	10-06 ≤ 𝑥 ≤ 10-06-01
hitachi	hirdb_server	09-00 ≤ 𝑥 ≤ 09-00-32
hitachi	hirdb_server	09-01 ≤ 𝑥 ≤ 09-01-24
hitachi	hirdb_server	09-02 ≤ 𝑥 ≤ 09-02-32
hitachi	hirdb_server	09-03 ≤ 𝑥 ≤ 09-03-31
hitachi	hirdb_server	09-04 ≤ 𝑥 ≤ 09-04-45
hitachi	hirdb_server	09-50 ≤ 𝑥 ≤ 09-50-37
hitachi	hirdb_server	09-60 ≤ 𝑥 ≤ 09-60-38
hitachi	hirdb_server	09-65 ≤ 𝑥 ≤ 09-65-22
hitachi	hirdb_server	09-66 ≤ 𝑥 ≤ 09-66-16
hitachi	hirdb_server	10-00 ≤ 𝑥 ≤ 10-00-09
hitachi	hirdb_server	10-01 ≤ 𝑥 ≤ 10-01-09
hitachi	hirdb_server	10-02 ≤ 𝑥 ≤ 10-02-12
hitachi	hirdb_server	10-03 ≤ 𝑥 ≤ 10-03-10
hitachi	hirdb_server	10-04 ≤ 𝑥 ≤ 10-04-04
hitachi	hirdb_server	10-05 ≤ 𝑥 ≤ 10-05-05
hitachi	hirdb_server	10-06 ≤ 𝑥 ≤ 10-06-01
hitachi	hirdb_server	09-00 ≤ 𝑥 ≤ 09-00-32
hitachi	hirdb_server	09-01 ≤ 𝑥 ≤ 09-01-24
hitachi	hirdb_server	09-02 ≤ 𝑥 ≤ 09-02-32
hitachi	hirdb_server	09-03 ≤ 𝑥 ≤ 09-03-31
hitachi	hirdb_server	09-04 ≤ 𝑥 ≤ 09-04-45
hitachi	hirdb_server	09-50 ≤ 𝑥 ≤ 09-50-37
hitachi	hirdb_server	09-60 ≤ 𝑥 ≤ 09-60-38
hitachi	hirdb_server	09-65 ≤ 𝑥 ≤ 09-65-22
hitachi	hirdb_server	09-66 ≤ 𝑥 ≤ 09-66-16
hitachi	hirdb_server	10-00 ≤ 𝑥 ≤ 10-00-09
hitachi	hirdb_server	10-01 ≤ 𝑥 ≤ 10-01-09
hitachi	hirdb_server	10-02 ≤ 𝑥 ≤ 10-02-12
hitachi	hirdb_server	10-03 ≤ 𝑥 ≤ 10-03-10
hitachi	hirdb_server	10-04 ≤ 𝑥 ≤ 10-04-05
hitachi	hirdb_server	10-05 ≤ 𝑥 ≤ 10-05-05
hitachi	hirdb_server	10-06 ≤ 𝑥 ≤ 10-06-01
hitachi	hirdb_server	09-00 ≤ 𝑥 ≤ 09-00-30
hitachi	hirdb_server	09-01 ≤ 𝑥 ≤ 09-01-24
hitachi	hirdb_server	09-02 ≤ 𝑥 ≤ 09-02-32
hitachi	hirdb_server	09-03 ≤ 𝑥 ≤ 09-03-27
hitachi	hirdb_server	09-04 ≤ 𝑥 ≤ 09-04-45
hitachi	hirdb_server	09-50 ≤ 𝑥 ≤ 09-50-37
hitachi	hirdb_server	09-60 ≤ 𝑥 ≤ 09-60-37
hitachi	hirdb_server	09-65 ≤ 𝑥 ≤ 09-65-22
hitachi	hirdb_server	09-66 ≤ 𝑥 ≤ 09-66-16
hitachi	hirdb_server	10-00 ≤ 𝑥 ≤ 10-00-09
hitachi	hirdb_server	10-01 ≤ 𝑥 ≤ 10-01-09
hitachi	hirdb_server	10-02 ≤ 𝑥 ≤ 10-02-12
hitachi	hirdb_server	10-03 ≤ 𝑥 ≤ 10-03-10
hitachi	hirdb_server	10-04 ≤ 𝑥 ≤ 10-04-04
hitachi	hirdb_server	10-05 ≤ 𝑥 ≤ 10-05-05

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-778 - Insufficient Logging
When a security-critical event occurs, the software either does not record the event or omits important details about the event when logging it.

References

https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-133/index.html