CVE-2026-112125 PUBLISHED

Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor

Assigner: Hitachi
Reserved: 19.10.2026 Published: 10.11.2026 Updated: 10.11.2026

Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor.

This issue affects HA Monitor: from 01-00 before 01-83-01.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS Score: 7.3

Product Status

Vendor Hitachi
Product HA Monitor
Versions Default: unaffected
  • affected from 01-00 to 01-83-01 (excl.)

References

Problem Types

  • CWE-732 Incorrect Permission Assignment for Critical Resource CWE

Impacts

  • CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels