CVE-2026-3314

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-3314", "assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82", "state": "PUBLISHED", "assignerShortName": "Hitachi", "dateReserved": "2026-02-27T06:34:14.106Z", "datePublished": "2026-05-26T05:57:09.752Z", "dateUpdated": "2026-05-26T12:22:47.157Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82", "shortName": "Hitachi", "dateUpdated": "2026-05-26T05:57:09.752Z"}, "title": "Missing Password Masking in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpoint", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-549", "description": "CWE-549 Missing password field masking", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-555", "descriptions": [{"lang": "en", "value": "CAPEC-555 Remote Services with Stolen Credentials"}]}], "affected": [{"vendor": "Hitachi", "product": "Hitachi Ops Center Analyzer", "platforms": ["Linux", "64 bit"], "modules": ["Hitachi Ops Center Analyzer detail view", "Hitachi Ops Center Analyzer probe"], "versions": [{"status": "affected", "version": "10.0.0-00", "lessThan": "11.0.8-00", "changes": [{"at": "11.0.8-00", "status": "unaffected"}], "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Hitachi", "product": "Hitachi Ops Center Analyzer viewpoint", "platforms": ["Linux", "64 bit"], "versions": [{"status": "affected", "version": "10.8.1-00", "lessThan": "11.0.8-00", "changes": [{"at": "11.0.8-00", "status": "unaffected"}], "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Hitachi", "product": "Hitachi Infrastructure Analytics Advisor", "platforms": ["Linux", "64 bit"], "modules": ["Data Center Analytics", "Analytics probe"], "versions": [{"status": "affected", "version": "3.2.0-00", "lessThan": "11.0.8-00", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe modules), Hitachi Ops Center Analyzer viewpoint, Hitachi Infrastructure Analytics Advisor (Data Center Analytics, Analytics probe modules).\n\nThis issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.8-00; Hitachi Ops Center Analyzer viewpoint: from 10.8.1-00 before 11.0.8-00; Hitachi Infrastructure Analytics Advisor: from 3.2.0-00 before 11.0.8-00.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe modules), Hitachi Ops Center Analyzer viewpoint, Hitachi Infrastructure Analytics Advisor (Data Center Analytics, Analytics probe modules).<p>This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.8-00; Hitachi Ops Center Analyzer viewpoint: from 10.8.1-00 before 11.0.8-00; Hitachi Infrastructure Analytics Advisor: from 3.2.0-00 before 11.0.8-00.</p>"}]}], "references": [{"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-120/index.html", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "PHYSICAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4.6, "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}}], "source": {"advisory": "hitachi-sec-2026-120", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-26T12:21:39.028766Z", "id": "CVE-2026-3314", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-26T12:22:47.157Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-3314", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-26T12:21:39.028766Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-26T12:22:43.790Z"}}], "cna": {"title": "Missing Password Masking in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpoint", "source": {"advisory": "hitachi-sec-2026-120", "discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-555", "descriptions": [{"lang": "en", "value": "CAPEC-555 Remote Services with Stolen Credentials"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.6, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Hitachi", "modules": ["Hitachi Ops Center Analyzer detail view", "Hitachi Ops Center Analyzer probe"], "product": "Hitachi Ops Center Analyzer", "versions": [{"status": "affected", "changes": [{"at": "11.0.8-00", "status": "unaffected"}], "version": "10.0.0-00", "lessThan": "11.0.8-00", "versionType": "custom"}], "platforms": ["Linux", "64 bit"], "defaultStatus": "unaffected"}, {"vendor": "Hitachi", "product": "Hitachi Ops Center Analyzer viewpoint", "versions": [{"status": "affected", "changes": [{"at": "11.0.8-00", "status": "unaffected"}], "version": "10.8.1-00", "lessThan": "11.0.8-00", "versionType": "custom"}], "platforms": ["Linux", "64 bit"], "defaultStatus": "unaffected"}, {"vendor": "Hitachi", "modules": ["Data Center Analytics", "Analytics probe"], "product": "Hitachi Infrastructure Analytics Advisor", "versions": [{"status": "affected", "version": "3.2.0-00", "lessThan": "11.0.8-00", "versionType": "custom"}], "platforms": ["Linux", "64 bit"], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-120/index.html", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe modules), Hitachi Ops Center Analyzer viewpoint, Hitachi Infrastructure Analytics Advisor (Data Center Analytics, Analytics probe modules).\n\nThis issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.8-00; Hitachi Ops Center Analyzer viewpoint: from 10.8.1-00 before 11.0.8-00; Hitachi Infrastructure Analytics Advisor: from 3.2.0-00 before 11.0.8-00.", "supportingMedia": [{"type": "text/html", "value": "Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe modules), Hitachi Ops Center Analyzer viewpoint, Hitachi Infrastructure Analytics Advisor (Data Center Analytics, Analytics probe modules).<p>This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.8-00; Hitachi Ops Center Analyzer viewpoint: from 10.8.1-00 before 11.0.8-00; Hitachi Infrastructure Analytics Advisor: from 3.2.0-00 before 11.0.8-00.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-549", "description": "CWE-549 Missing password field masking"}]}], "providerMetadata": {"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82", "shortName": "Hitachi", "dateUpdated": "2026-05-26T05:57:09.752Z"}}}, "cveMetadata": {"cveId": "CVE-2026-3314", "state": "PUBLISHED", "dateUpdated": "2026-05-26T12:22:47.157Z", "dateReserved": "2026-02-27T06:34:14.106Z", "assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82", "datePublished": "2026-05-26T05:57:09.752Z", "assignerShortName": "Hitachi"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "modules": ["Hitachi Ops Center Analyzer detail view", "Hitachi Ops Center Analyzer probe"], "platforms": ["Linux", "64 bit"], "product": "Hitachi Ops Center Analyzer", "vendor": "Hitachi", "versions": [{"changes": [{"at": "11.0.8-00", "status": "unaffected"}], "lessThan": "11.0.8-00", "status": "affected", "version": "10.0.0-00", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "platforms": ["Linux", "64 bit"], "product": "Hitachi Ops Center Analyzer viewpoint", "vendor": "Hitachi", "versions": [{"changes": [{"at": "11.0.8-00", "status": "unaffected"}], "lessThan": "11.0.8-00", "status": "affected", "version": "10.8.1-00", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "modules": ["Data Center Analytics", "Analytics probe"], "platforms": ["Linux", "64 bit"], "product": "Hitachi Infrastructure Analytics Advisor", "vendor": "Hitachi", "versions": [{"lessThan": "11.0.8-00", "status": "affected", "version": "3.2.0-00", "versionType": "custom"}]}], "source": "hirt@hitachi.co.jp"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe modules), Hitachi Ops Center Analyzer viewpoint, Hitachi Infrastructure Analytics Advisor (Data Center Analytics, Analytics probe modules).\n\nThis issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.8-00; Hitachi Ops Center Analyzer viewpoint: from 10.8.1-00 before 11.0.8-00; Hitachi Infrastructure Analytics Advisor: from 3.2.0-00 before 11.0.8-00."}, {"lang": "es", "value": "Vulnerabilidad por falta de enmascaramiento del campo de contrase\u00f1a en Hitachi Ops Center Analyzer (vista de detalles de Hitachi Ops Center Analyzer, m\u00f3dulos de sonda de Hitachi Ops Center Analyzer), Hitachi Ops Center Analyzer viewpoint, Hitachi Infrastructure Analytics Advisor (An\u00e1lisis de centros de datos, m\u00f3dulos de sonda de an\u00e1lisis).\n\nEste problema afecta a Hitachi Ops Center Analyzer: desde 10.0.0-00 antes de 11.0.8-00; Hitachi Ops Center Analyzer viewpoint: desde 10.8.1-00 antes de 11.0.8-00; Hitachi Infrastructure Analytics Advisor: desde 3.2.0-00 antes de 11.0.8-00."}], "id": "CVE-2026-3314", "lastModified": "2026-07-24T11:10:00.170", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 4.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 3.6, "source": "hirt@hitachi.co.jp", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-3314", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-26T12:21:39.028766Z", "version": "2.0.3"}}]}, "published": "2026-05-26T07:16:18.807", "references": [{"source": "hirt@hitachi.co.jp", "url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-120/index.html"}], "sourceIdentifier": "hirt@hitachi.co.jp", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-549"}], "source": "hirt@hitachi.co.jp", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["linux", "64_bit"], "status": "affected", "versions": {"scheme": "generic", "value": "[3.2.0-00,11.0.8-00)"}}], "enrichment": {"confidence": 91.0, "confidence_source": "matching", "scores": [{"score": 91.0, "source": "matching"}]}, "original": {"product": "Hitachi Infrastructure Analytics Advisor", "source": "cna", "vendor": "Hitachi"}, "product": "infrastructure_analytics_advisor", "vendor": "hitachi"}, {"configurations": [{"platform": ["linux", "64_bit"], "status": "affected", "versions": {"scheme": "generic", "value": "[10.0.0-00,11.0.8-00)"}}], "enrichment": {"confidence": 87.0, "confidence_source": "matching", "scores": [{"score": 87.0, "source": "matching"}]}, "original": {"product": "Hitachi Ops Center Analyzer", "source": "cna", "vendor": "Hitachi"}, "product": "ops_center_analyzer", "vendor": "hitachi"}, {"configurations": [{"platform": ["linux", "64_bit"], "status": "affected", "versions": {"scheme": "generic", "value": "[10.8.1-00,11.0.8-00)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Hitachi Ops Center Analyzer viewpoint", "source": "cna", "vendor": "Hitachi"}, "product": "ops_center_analyzer_viewpoint", "vendor": "hitachi"}], "created": "2026-05-26T07:30:36.191641+00:00", "updated": "2026-05-27T10:05:26.058959+00:00", "vendors": ["hitachi", "hitachi$PRODUCT$infrastructure_analytics_advisor", "hitachi$PRODUCT$ops_center_analyzer", "hitachi$PRODUCT$ops_center_analyzer_viewpoint"]}