CVE Feed

    Dashboard / CVE / CVE-2022-4895

    CVE-2022-4895

    Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component) allows Man in the Middle Attack.This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.1-00.

    Published:Feb 28, 2023
    Last Modified:Mar 7, 2025
    EPS:Feb 28, 2023
    EPSS Score:0.00061
    CVSS Score:8.6

    Affected Products

    Vendor
    Hitachi
    Product
    Infrastructure Analytics Advisor
    Vendor
    Hitachi
    Product
    Ops Center Analyzer
    Vendor
    Linux
    Product
    Linux Kernel

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-295 Improper Certificate Validation

    Related CVEs

    CVE-2026-3314 (CVSS 4.6) — Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detai…
    CVE-2026-2072 (CVSS 8.2) — Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor (Analytics probe component), Hi…
    CVE-2025-66444 (CVSS 8.2) — Cross-site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics componen…
    CVE-2025-66445 (CVSS 7.1) — Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics componen…
    CVE-2025-1245 (CVSS 6.5) — Bypass Connection Restriction vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics…
    CVE-2024-10205 (CVSS 9.4) — Authentication Bypass vulnerability in Hitachi Ops Center Analyzer on Linux, 64 bit (Hitachi Ops Center Analyz…
    CVE-2020-36652 (CVSS 6.6) — Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure An…
    CVE-2022-41553 (CVSS 6.5) — Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advis…
    CVE-2022-41552 (CVSS 9.8) — Server-Side Request Forgery (SSRF) vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Data Ce…
    CVE-2020-36605 (CVSS 6.6) — Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics pr…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High