CVE Vulnerabilities

CVE-2025-5781

Insertion of Sensitive Information into Log File

Published: Feb 25, 2026 | Modified: Feb 27, 2026
CVSS 3.x
5.2
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.

Weakness

The product writes sensitive information to a log file.

Affected Software

NameVendorStart VersionEnd Version
Configuration_managerHitachi8.5.1-00 (including)*
Configuration_managerHitachi8.5.1-00 (including)11.0.5-00 (excluding)
Device_managerHitachi8.4.1-00 (including)8.6.5-00 (excluding)
Ops_center_api_configuration_managerHitachi10.0.0-00 (including)11.0.5-00 (excluding)

Potential Mitigations

References