VYPR
← All advisories
High severity8.4NVD Advisory· Published Oct 3, 2023· Updated Jun 17, 2026

CVE-2023-3440

CVE-2023-3440

Description

Incorrect Default Permissions vulnerability in Hitachi JP1/Performance Management on Windows allows File Manipulation.This issue affects JP1/Performance Management - Manager: from 09-00 before 12-50-07; JP1/Performance Management - Base: from 09-00 through 10-50-*; JP1/Performance Management - Agent Option for Application Server: from 11-00 before 11-50-16; JP1/Performance Management - Agent Option for Enterprise Applications: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for HiRDB: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for IBM Lotus Domino: from 10-00 before 11-50-16; JP1/Performance Management - Agent Option for Microsoft(R) Exchange Server: from 09-00 before  12-00-14; JP1/Performance Management - Agent Option for Microsoft(R) Internet Information Server: from 09-00 before 12-00-14; JP1/Performance Management - Agent Option for Microsoft(R) SQL Server: from 09-00 before 12-50-07; JP1/Performance Management - Agent Option for Oracle: from 09-00 before  12-10-08; JP1/Performance Management - Agent Option for Platform: from 09-00 before 12-50-07; JP1/Performance Management - Agent Option for Service Response: from 09-00 before 11-50-16; JP1/Performance Management - Agent Option for Transaction System: from 11-00 before 12-00-14; JP1/Performance Management - Remote Monitor for Microsoft(R) SQL Server: from 09-00 before 12-50-07; JP1/Performance Management - Remote Monitor for Oracle: from 09-00 before 12-10-08; JP1/Performance Management - Remote Monitor for Platform: from 09-00 before 12-10-08; JP1/Performance Management - Remote Monitor for Virtual Machine: from 10-00 before 12-50-07; JP1/Performance Management - Agent Option for Domino: from 09-00 through 09-00-*; JP1/Performance Management - Agent Option for IBM WebSphere Application Server: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for IBM WebSphere MQ: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for JP1/AJS3: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for OpenTP1: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for Oracle WebLogic Server: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for uCosminexus Application Server: from 09-00 through 10-00-*; JP1/Performance Management - Agent Option for Virtual Machine: from 09-00 through 09-01-*.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

27
  • Hitachi/Jp1\/performance Management
    cpe:2.3:a:hitachi:jp1\/performance_management:-:*:*:*:*:*:*:*
  • Hitachi/Jpi Performance Managementllm-fuzzy3 versions
    from 09-00 before 12-50-07; from 09-00 through 10-50-*; from 11-00 before 11-50-16; from 09-00 before 12-00-14; from 09-00 before 12-00-14; from 10-00 before 11-50-16; from 09-00 before 12-00-14; from 09-00 before 12-00-14; from 09-00 before 12-50-07; from 09-00 before 12-10-08; from 09-00 before 12-50-07; from 09-00 before 11-50-16; from 11-00 before 12-00-14; from 09-00 before 12-50-07; from 09-00 before 12-10-08; from 09-00 before 12-10-08; from 10-00 before 12-50-07; from 09-00 through 09-00-*; from 09-00 through 10-00-*; from 09-00 through 10-00-*; from 09-00 through 10-00-*; from 09-00 through 10-00-*; from 09-00 through 10-00-*; from 09-00 through 10-00-*; from 09-00 through 09-01-*+ 2 more
    • (no CPE)range: from 09-00 before 12-50-07; from 09-00 through 10-50-*; from 11-00 before 11-50-16; from 09-00 before 12-00-14; from 09-00 before 12-00-14; from 10-00 before 11-50-16; from 09-00 before 12-00-14; from 09-00 before 12-00-14; from 09-00 before 12-50-07; from 09-00 before 12-10-08; from 09-00 before 12-50-07; from 09-00 before 11-50-16; from 11-00 before 12-00-14; from 09-00 before 12-50-07; from 09-00 before 12-10-08; from 09-00 before 12-10-08; from 10-00 before 12-50-07; from 09-00 through 09-00-*; from 09-00 through 10-00-*; from 09-00 through 10-00-*; from 09-00 through 10-00-*; from 09-00 through 10-00-*; from 09-00 through 10-00-*; from 09-00 through 10-00-*; from 09-00 through 09-01-*
    • (no CPE)range: 09-00
    • (no CPE)range: 09-00
  • Hitachi/Jp1\/performance Management Manager Web Optioncpe-rescue10 versions
    11-00+ 9 more
    • (no CPE)range: 11-00
    • (no CPE)range: 09-00
    • (no CPE)range: 09-00
    • (no CPE)range: 09-00
    • (no CPE)range: 09-00
    • (no CPE)range: 09-00
    • (no CPE)range: 09-00
    • (no CPE)range: 09-00
    • (no CPE)range: 09-00
    • (no CPE)range: 09-00
  • Hitachi/JP1/Performance Management - Agent Option for Enterprise Applicationsv5
    Range: 09-00
  • Hitachi/JP1/Performance Management - Agent Option for IBM Lotus Dominov5
    Range: 10-00
  • Hitachi/JP1/Performance Management - Agent Option for IBM WebSphere Application Serverv5
    Range: 09-00
  • Hitachi/JP1/Performance Management - Agent Option for Microsoft(R) Exchange Serverv5
    Range: 09-00
  • Hitachi/JP1/Performance Management - Agent Option for Microsoft(R) Internet Information Serverv5
    Range: 09-00
  • Hitachi/JP1/Performance Management - Agent Option for Microsoft(R) SQL Serverv5
    Range: 09-00
  • Hitachi/JP1/Performance Management - Agent Option for Service Responsev5
    Range: 09-00
  • Hitachi/JP1/Performance Management - Agent Option for Transaction Systemv5
    Range: 11-00
  • Hitachi/JP1/Performance Management - Agent Option for uCosminexus Application Serverv5
    Range: 09-00
  • Hitachi/JP1/Performance Management - Remote Monitor for Microsoft(R) SQL Serverv5
    Range: 09-00
  • Hitachi/JP1/Performance Management - Remote Monitor for Oraclev5
    Range: 09-00
  • Hitachi/JP1/Performance Management - Remote Monitor for Platformv5
    Range: 09-00
  • Hitachi/JP1/Performance Management - Remote Monitor for Virtual Machinev5
    Range: 10-00

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.