Hitachi Ops Center Administrator: Schwachstelle ermöglicht Offenlegung von Informationen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Hitachi Ops Center Administrator ausnutzen, um Informationen offenzulegen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-39001 linked CVE
Open advisory with all CVEs
More on Administrator
Other advisories
- Not ratedosv:CLEANSTART-2024-ZR04755When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator
- Not ratedosv:CLEANSTART-2024-DB97012pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in t...
- Not ratedosv:CLEANSTART-2024-VJ19718pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes a...
- Not ratedosv:CLEANSTART-2024-DW33398Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability
- Not ratedosv:CLEANSTART-2024-SC60568When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator
- Not ratedosv:CVE-2026-63339IXP Manager has authenticated non-administrator privilege escalation
- Not ratedosv:CVE-2026-63377TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover
- Not ratedosv:CVE-2026-62991Shopper: customer detail IDOR exposes administrator and staff records
Other news entries
- pgAdmin: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Progress Software WS_FTP: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Microsoft fixes Remote Desktop failures caused by recent Windows updatesNewsBleepingComputer
- Jenkins: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Sophos Unified Threat Management (UTM) Software: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit AdministratorrechtenVulnerabilityBSI CERT-Bund
- Mitel OpenScape Endpoint Management: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- CrushFTP: Schwachstelle ermöglicht Erlangen von AdministratorrechtenVulnerabilityBSI CERT-Bund
- WatchGuard Fireware OS: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3900
ID