[Japanese] | |
JVNDB-2014-001594 | |
JP1/File Transmission Server / FTP vulnerable to access control violation | |
Overview | |
JP1/File Transmission Server/FTP has a vulnerability where an FTP client with limited access rights can bypass the access control and access arbitrary directories on the FTP server when enabling the directory access control function. | |
CVSS Severity (What is CVSS?) | |
CVSS V2 Severity:
Base Metrics 6.5 (Medium) [Vendor Score]
| |
Affected Products | |
| |
Hitachi, Ltd | |
Please refer to HS14-007 provided by Hitachi for more details. | |
Impact | |
An attacker with login privileges to the FTP server can exploit this vulnerability to destroy data or obtain sensitive data in the system, or possibly cause other damage. | |
Solution | |
Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action. | |
Vendor Information | |
Hitachi, Ltd | |
CWE (What is CWE?) | |
| |
CVE (What is CVE?) | |
| |
References | |
| |
Revision History | |
|
Date Public | 2014/03/07 |
Date First Published | 2014/03/11 |
Date Last Updated | 2015/03/03 |