Expression Language Injection vulnerability in Hitachi Replication Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Replication Manager: before 8.8.5-02.
References
| Link | Resource |
|---|---|
| https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-123/index.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
27 Jul 2023, 17:11
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:a:hitachi:replication_manager:*:*:*:*:*:*:*:* cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:* |
|
| References | (MISC) https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-123/index.html - Vendor Advisory | |
| CWE | CWE-917 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| First Time |
Hitachi replication Manager
Linux Linux linux Kernel Microsoft Oracle solaris Microsoft windows Oracle Hitachi |
18 Jul 2023, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-18 03:15
Updated : 2023-07-27 17:11
NVD link : CVE-2022-4146
Mitre link : CVE-2022-4146
JSON object : View
Products Affected
linux
- linux_kernel
oracle
- solaris
microsoft
- windows
hitachi
- replication_manager
CWE
CWE-917
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')