SARA / Free Tools / CVE / CVE-2023-3440

CVE-2023-3440 — Incorrect Default Permissions vulnerability in Hitachi JP1/Performance Managemen

Incorrect Default Permissions vulnerability in Hitachi JP1/Performance Management on Windows allows File Manipulation.This issue affects JP1/Performance Management - Manager: from 09-00 before 12-50-07; JP1/Performance Management - Base: from 09-00 through 10-50-*; JP1/Performanc

CVSS
8.4 HIGH
EPSS
9.00% (top 74.80%)
CWE
CWE-276
Published
2023-10-03T01:05:42.803Z
Last modified
2024-08-02T06:55:03.179Z
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

01What is this vulnerability?

Incorrect Default Permissions vulnerability in Hitachi JP1/Performance Management on Windows allows File Manipulation.This issue affects JP1/Performance Management - Manager: from 09-00 before 12-50-07; JP1/Performance Management - Base: from 09-00 through 10-50-*; JP1/Performance Management - Agent Option for Application Server: from 11-00 before 11-50-16; JP1/Performance Management - Agent…

02Affected products

VendorProductVersions
HitachiJP1/Performance ManagementManager — 09-00, 11-50, 12-00, 12-10, 12-50
HitachiJP1/Performance ManagementBase — 09-00
HitachiJP1/Performance ManagementAgent Option for Application Server — 11-00
HitachiJP1/Performance ManagementAgent Option for Enterprise Applications — 09-00, 11-50, 12-00
HitachiJP1/Performance ManagementAgent Option for HiRDB — 09-00, 11-50, 12-00
HitachiJP1/Performance ManagementAgent Option for IBM Lotus Domino — 10-00
HitachiJP1/Performance ManagementAgent Option for Microsoft(R) Exchange Server — 09-00, 11-50, 12-00
HitachiJP1/Performance ManagementAgent Option for Microsoft(R) Internet Information Server — 09-00, 11-50, 12-00
HitachiJP1/Performance ManagementAgent Option for Microsoft(R) SQL Server — 09-00, 11-50, 12-00, 12-50
HitachiJP1/Performance ManagementAgent Option for Oracle — 09-00, 11-50, 12-00, 12-10
HitachiJP1/Performance ManagementAgent Option for Platform — 09-00, 11-50, 12-00, 12-50
HitachiJP1/Performance ManagementAgent Option for Service Response — 09-00
HitachiJP1/Performance ManagementAgent Option for Transaction System — 11-00, 12-00
HitachiJP1/Performance ManagementRemote Monitor for Microsoft(R) SQL Server — 09-00, 11-50, 12-00, 12-50
HitachiJP1/Performance ManagementRemote Monitor for Oracle — 09-00, 11-50, 12-00, 12-10
HitachiJP1/Performance ManagementRemote Monitor for Platform — 09-00, 11-50, 12-00, 12-10
HitachiJP1/Performance ManagementRemote Monitor for Virtual Machine — 10-00, 11-50, 12-00, 12-10, 12-50
HitachiJP1/Performance ManagementAgent Option for Domino — 09-00
HitachiJP1/Performance ManagementAgent Option for IBM WebSphere Application Server — 09-00
HitachiJP1/Performance ManagementAgent Option for IBM WebSphere MQ — 09-00
HitachiJP1/Performance ManagementAgent Option for JP1/AJS3 — 09-00
HitachiJP1/Performance ManagementAgent Option for OpenTP1 — 09-00
HitachiJP1/Performance ManagementAgent Option for Oracle WebLogic Server — 09-00
HitachiJP1/Performance ManagementAgent Option for uCosminexus Application Server — 09-00
HitachiJP1/Performance ManagementAgent Option for Virtual Machine — 09-00

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Open the Sigma generator with a pre-filled prompt for this CVE to draft a starting detection in your stack of choice:

Open in Sigma generator →

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →