CVE-2023-1995

Insufficient Logging Vulnerability in HiRDB

State: Published
Severity: 5.3 Medium
Published: Aug 29, 2023
Updated: Sep 30, 2024
Reserved: Apr 12, 2023

Description

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23,

before 09-66-17,

before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before 10-06-02; HiRDB Server With Addtional Function: before 09-60-2M, before 09-65-/W

, before 09-66-/Q

; HiRDB Structured Data Access Facility: before 09-60-39, before 10-03-12, before 10-04-06, before 10-06-02.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N	Hitachi

Weaknesses

CWE-778 Insufficient Logging

Affected Products

Product	Versions
HiRDB ServerHitachi	07-03 to before 09-60Affected 09-60 to before 09-60-39Affectedfrom 09-60-39Not affected 09-65 to before 09-65-23Affectedfrom 09-65-23Not affected 09-66 to before 09-66-17Affectedfrom 09-66-17Not affected 10-00 through 10-00-Affected 10-01 to before 10-01-10Affectedfrom 10-01-10Not affected 10-02 through 10-02-Affected 10-03 to before 10-03-12Affectedfrom 10-03-12Not affected 10-04 to before 10-04-06Affectedfrom 10-04-06Not affected 10-05 to before 10-05-06Affectedfrom 10-05-06Not affected 10-06 to before 10-06-02Affectedfrom 10-06-02Not affected
HiRDB Server With Addtional FunctionHitachi	07-03 to before 09-60Affected 09-60 to before 09-60-2MAffectedfrom 09-60-2MNot affected 09-65 to before 09-65-/WAffectedfrom 09-65-/WNot affected 09-66 to before 09-66-/QAffectedfrom 09-66-/QNot affected
HiRDB Structured Data Access FacilityHitachi	07-03 to before 09-60Affected 09-60 to before 09-60-39Affectedfrom 09-60-39Not affected 09-65 through 09-65-Affected 09-66 through 09-66-Affected 10-00 through 10-00-Affected 10-01 through 10-01-Affected 10-02 through 10-02-Affected 10-03 to before 10-03-12Affectedfrom 10-03-12Not affected 10-04 to before 10-04-06Affectedfrom 10-04-06Not affected 10-05 through 10-05-Affected 10-06 to before 10-06-02Affectedfrom 10-06-02Not affected

References

https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-133/index.htmlvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.