HiRDBに重大な脆弱性、Version 10は修正版あり
Summary
日立のデータベースHiRDBに、CVSS v3で9.8の脆弱性が公表されました。Version 9と10を使う組織が対象で、Version 10には修正版があるため、使っている版と系列を洗い出して更新を進めてください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
日立のデータベースHiRDBに、CVSS v3で9.8の脆弱性が公表されました。Version 9と10を使う組織が対象で、Version 10には修正版があるため、使っている版と系列を洗い出して更新を進めてください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| HitachiHiRDB Server Version 10 |
≥ 10-00, < 10-12-01→ 10-12-01 |
10-12-01 |
| HitachiHiRDB Server Version 9 |
09-50-06 – 09-66-22→ Not listed |
Not listed |
| HitachiHiRDB Server with Additional Function Version 9 |
09-50-/F – 09-66/V→ Not listed |
Not listed |
| HitachiHiRDB Server Version 9(32) |
09-50-06 – 09-66-22→ Not listed |
Not listed |
| HitachiHiRDB Server with Additional Function Version 9(32) |
09-50-/F – 09-66-/V→ Not listed |
Not listed |
Original description The description as published by the source.
Partial String Comparison Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-50-06 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-50-/F through 09-66/V; HiRDB Server Version 9(32): from 09-50-06 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-50-/F through 09-66-/V.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web hirt@hitachi.co.jp
- web nvd.nist.gov
- web github.com