CVE-2025-66445CWE-306

CVE-2025-66445

High · published December 24, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
11.4
In the wild
Unconfirmed
What it is

⚡ An authorization bypass in Hitachi's infrastructure tools leaves doors wide open for unauthorized access! 🔓 Think of it like a hotel where anyone can waltz into the lobby without showing a room key, giving strangers immediate access to sensitive areas. 😱 With this vulnerability, an attacker could slip right through the security gate, gaining unauthorized access to critical data and insights - potentially altering configurations or snatching sensitive information. The risks are high, especially in environments where data integrity is paramount!

Put simply

Think of it like a hotel where anyone can waltz into the lobby without showing a room key, giving strangers immediate access to sensitive areas. 😱 This vulnerability allows an attacker to bypass the necessary authorization checks in the Hitachi Infrastructure Analytics Advisor and Ops Center Analyzer, compromising security. Affected versions are from 10.0.0-00 to before 11.0.5-00, meaning if you're on these versions, you're at risk!

What to do

With this vulnerability, an attacker could slip right through the security gate, gaining unauthorized access to critical data and insights - potentially altering configurations or snatching sensitive information. The risks are high, especially in environments where data integrity is paramount! Immediately update your systems to version 11.0.5-00 or later to close this vulnerability. Additionally, review your security configurations to ensure no unauthorized access is possible. Don't forget to monitor logs for any suspicious activity while you're at it! You've got this! With a little diligence, you can secure your systems and keep your data safe! 🛡️

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00216 · 11.4th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-12-24T10:16Z
References (1)
EPSS history
Timeline
  • 24 DEC 04:52Z
    Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer
    cvelistv5