Secunia

Hitachi has acknowledged a security issue in Hitachi JP1/Cm2/Network Node Manager, which can be exploited by malicious, local users to manipulate certain data and potentially gain escalated privileges.

The security issue is caused due to insecure file permissions when running the Network Node Manager Remote Console, which can be exploited to replace affected files.

The security issue is reported in the following products and versions:
* JP1/Cm2/Network Node Manager Enterprise version 06-51 to 06-71
* JP1/Cm2/Network Node Manager 250 version 06-51 to 06-71
* JP1/Cm2/Network Node Manager version 07-00 to 07-10
* JP1/Cm2/Network Node Manager Starter Edition Enterprise version 08-00 to 08-10
* JP1/Cm2/Network Node Manager Starter Edition 250 version 08-00 to 08-10

Solution
Restrict access to trusted users only.

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS10-002/index.html

Deep Links
Links available in Customer Area