CVE-2025-5781

Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager

State: Published
Severity: 5.2 Medium
Published: Feb 25, 2026
Updated: Feb 26, 2026
Reserved: Jun 6, 2025

Description

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.

Scores

CVSS	Score	Vector	Source
3.1	5.2 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	Hitachi

Weaknesses

CWE-532 Insertion of Sensitive Information into Log File

Affected Products

Product	Versions
Hitachi Ops Center API Configuration ManagerHitachi	10.0.0-00 to before 11.0.5-00Affectedfrom 11.0.5-00Not affected
Hitachi Configuration ManagerHitachi	8.5.1-00 to before 11.0.5-00Affectedfrom 11.0.5-00Not affected
Hitachi Device ManagerHitachi	8.4.1-00 to before 8.6.5-00Affectedfrom 8.6.5-00Not affected

References

https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-111/index.htmlvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.