CVE-2024-4679

Folder Permission Vulnerability in JP1/Extensible SNMP Agent

State: Published
Severity: 7.8 High
Published: Jul 2, 2024
Updated: Aug 1, 2024
Reserved: May 9, 2024

Description

Incorrect Default Permissions vulnerability in Hitachi JP1/Extensible SNMP Agent for Windows, Hitachi JP1/Extensible SNMP Agent on Windows, Hitachi Job Management Partner1/Extensible SNMP Agent on Windows allows File Manipulation.This issue affects JP1/Extensible SNMP Agent for Windows: from 12-00 before 12-00-01, from 11-00 through 11-00-*; JP1/Extensible SNMP Agent: from 10-10 through 10-10-01, from 10-00 through 10-00-02, from 09-00 through 09-00-04; Job Management Partner1/Extensible SNMP Agent: from 10-10 through 10-10-01, from 10-00 through 10-00-02, from 09-00 through 09-00-04.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Hitachi

Weaknesses

CWE-276 Incorrect Default Permissions

Affected Products

Product	Versions
JP1/Extensible SNMP Agent for WindowsHitachi	12-00 to before 12-00-01Affectedfrom 12-00-01Not affected 11-00 through 11-00-*Affected
JP1/Extensible SNMP AgentHitachi	10-10 through 10-10-01Affected 10-00 through 10-00-02Affected 09-00 through 09-00-04Affected
Job Management Partner1/Extensible SNMP AgentHitachi	10-10 through 10-10-01Affected 10-00 through 10-00-02Affected 09-00 through 09-00-04Affected

References

https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-127/index.htmlvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.