CVE-2021-41573

Hitachi Content Platform Anywhere (HCP-AW) 4.4.5 and later allows information disclosure

High · published September 29, 2021

CVSS v3.1
7.5
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

Hitachi Content Platform Anywhere (HCP-AW) 4.4.5 and later allows information disclosure. If authenticated user creates a link to a file or folder while the system was running version 4.3.x or earlier and then shares the link and then later deletes the file or folder without deleting the link and before the link expires. If the system has been upgraded to version 4.4.5 or 4.5.0 a malicious user with the link could browse and download all files of the authenticated user that created the link .

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00818 · 56.7th percentile
Published
2021-09-29T17:50Z
EPSS history
Timeline
  • 29 SEP 17:50Z
    Hitachi Content Platform Anywhere (HCP-AW) 4.4.5 and later allows information disclosure
    cvelistv5