JP1/IT Desktop Management 2 安全漏洞
CVE编号
CVE-2021-29645利用情况
暂无补丁情况
N/A披露时间
2021-10-13漏洞描述
Hitachi JP1/IT Desktop Management 2是日本日立（Hitachi）公司的自动收集各种类型的信息，让您可以在一处进行管理。 Hitachi JP1 IT Desktop Management存在安全漏洞，该漏洞源于通过本地管道调用带有任意参数的SendMessageTimeoutW API，导致本地权限升级漏洞。利用此问题的攻击者可利用该漏洞可以在本地系统上执行任意代码。解决建议
目前厂商已发布升级补丁以修复漏洞，补丁获取链接：https://www.hitachi.com/hirt/security/index.html
参考链接 |
|
|---|---|
| https://www.hitachi.com/hirt/security/index.html |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 应用 | hitachi | it_operations_director | * | From (including) 02-50 | Up to (including) 02-50-07 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | it_operations_director | * | From (including) 03-00 | Up to (including) 03-00-12 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | it_operations_director | * | From (including) 04-00 | Up to (including) 04-00-17 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | it_operations_director | * | From (including) 04-50 | Up to (including) 04-50-16 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/it_desktop_management-manager | * | From (including) 09-50 | Up to (including) 09-50-03 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/it_desktop_management-manager | * | From (including) 10-01 | Up to (including) 10-01-06 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/it_desktop_management-manager | * | From (including) 10-10 | Up to (including) 10-10-16 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/it_desktop_management_2-manager | * | From (including) 10-50 | Up to (including) 10-50-11 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/remote_control_agent | * | From (including) 08-00 | Up to (including) 08-00-04 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/remote_control_agent | * | From (including) 08-10 | Up to (including) 08-10-05 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/remote_control_agent | * | From (including) 08-51 | Up to (including) 08-51-18 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/remote_control_agent | * | From (including) 09-00 | Up to (including) 09-00-07 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/remote_control_agent | * | From (including) 09-50 | Up to (including) 09-50-09 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/remote_control_agent | * | From (including) 09-51 | Up to (including) 09-51-15 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/software_distribution_client | * | From (including) 08-00 | Up to (including) 08-00-05 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/software_distribution_client | * | From (including) 08-10 | Up to (including) 08-10-06 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/software_distribution_client | * | From (including) 08-51 | Up to (including) 08-51-19 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/software_distribution_client | * | From (including) 09-00 | Up to (including) 09-00-09 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/software_distribution_client | * | From (including) 09-50 | Up to (including) 09-50-09 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/software_distribution_client | * | From (including) 09-51 | Up to (including) 09-51-13 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/software_distribution_manager | * | From (including) 08-00 | Up to (including) 08-00-07 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/software_distribution_manager | * | From (including) 08-10 | Up to (including) 08-10-06 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/software_distribution_manager | * | From (including) 08-51 | Up to (including) 08-51-19 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/software_distribution_manager | * | From (including) 09-00 | Up to (including) 09-00-09 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/software_distribution_manager | * | From (including) 09-50 | Up to (including) 09-50-09 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | job_management_partner_1/software_distribution_manager | * | From (including) 09-51 | Up to (including) 09-51-13 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management-manager | * | From (including) 09-50 | Up to (including) 09-50-03 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management-manager | * | From (including) 09-51 | Up to (including) 09-51-05 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management-manager | * | From (including) 10-00 | Up to (including) 10-00-02 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management-manager | * | From (including) 10-01 | Up to (including) 10-01-05 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management-manager | * | From (including) 10-02 | Up to (including) 10-02-05 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management-manager | * | From (including) 10-10 | Up to (including) 10-10-16 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management_2-manager | * | From (including) 10-50 | Up to (including) 10-50-12 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management_2-manager | * | From (including) 11-00 | Up to (including) 11-00-11 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management_2-manager | * | From (including) 11-01 | Up to (including) 11-01-12 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management_2-manager | * | From (including) 11-10 | Up to (including) 11-10-10 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management_2-manager | * | From (including) 11-50 | Up to (including) 11-50-08 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management_2-manager | * | From (including) 11-51 | Up to (including) 11-51-10 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management_2-manager | * | From (including) 12-00 | Up to (including) 12-00-09 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management_2-manager | * | From (including) 12-10 | Up to (including) 12-10-07 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management_2-manager | * | From (including) 12-50 | Up to (including) 12-50-03 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management_2-operations_director | * | From (including) 11-01 | Up to (including) 11-01-12 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management_2-operations_director | * | From (including) 11-10 | Up to (including) 11-10-10 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management_2-operations_director | * | From (including) 11-50 | Up to (including) 11-50-08 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management_2-operations_director | * | From (including) 11-51 | Up to (including) 11-51-10 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management_2-operations_director | * | From (including) 12-00 | Up to (including) 12-00-09 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management_2-operations_director | * | From (including) 12-10 | Up to (including) 12-10-07 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/it_desktop_management_2-operations_director | * | From (including) 12-50 | Up to (including) 12-50-03 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client | * | From (including) 08-00 | Up to (including) 08-00-09 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client | * | From (including) 08-01 | Up to (including) 08-01-04 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client | * | From (including) 08-02 | Up to (including) 08-02-07 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client | * | From (including) 08-10 | Up to (including) 08-10-13 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client | * | From (including) 08-11 | Up to (including) 08-11-17 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client | * | From (including) 08-12 | Up to (including) 08-12-03 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client | * | From (including) 08-50 | Up to (including) 08-50-08 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client | * | From (including) 08-51 | Up to (including) 08-51-17 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client | * | From (including) 08-52 | Up to (including) 08-52-22 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client | * | From (including) 09-00 | Up to (including) 09-00-14 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client | * | From (including) 09-01 | Up to (including) 09-01-14 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client | * | From (including) 09-10 | Up to (including) 09-10-15 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client | * | From (including) 09-12 | Up to (including) 09-12-16 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client | * | From (including) 09-50 | Up to (including) 09-50-20 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client | * | From (including) 09-51 | Up to (including) 09-51-14 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client | * | From (including) 10-10 | Up to (including) 10-10-23 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client-remote_control_feature | * | From (including) 08-00 | Up to (including) 08-00-06 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client-remote_control_feature | * | From (including) 08-01 | Up to (including) 08-01-03 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client-remote_control_feature | * | From (including) 08-02 | Up to (including) 08-02-04 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client-remote_control_feature | * | From (including) 08-10 | Up to (including) 08-10-10 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client-remote_control_feature | * | From (including) 08-11 | Up to (including) 08-11-06 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client-remote_control_feature | * | From (including) 08-50 | Up to (including) 08-50-04 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client-remote_control_feature | * | From (including) 08-51 | Up to (including) 08-51-14 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client-remote_control_feature | * | From (including) 09-00 | Up to (including) 09-00-13 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client-remote_control_feature | * | From (including) 09-01 | Up to (including) 09-01-12 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client-remote_control_feature | * | From (including) 09-10 | Up to (including) 09-10-13 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client-remote_control_feature | * | From (including) 09-50 | Up to (including) 09-50-19 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client-remote_control_feature | * | From (including) 09-51 | Up to (including) 09-51-08 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_client-remote_control_feature | * | From (including) 10-10 | Up to (including) 10-10-20 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_manager | * | From (including) 08-00 | Up to (including) 08-00-09 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_manager | * | From (including) 08-02 | Up to (including) 08-02-07 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_manager | * | From (including) 08-10 | Up to (including) 08-10-13 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_manager | * | From (including) 08-11 | Up to (including) 08-11-17 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_manager | * | From (including) 08-50 | Up to (including) 08-50-08 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_manager | * | From (including) 08-51 | Up to (including) 08-51-18 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_manager | * | From (including) 08-52 | Up to (including) 08-52-22 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_manager | * | From (including) 09-00 | Up to (including) 09-00-14 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_manager | * | From (including) 09-01 | Up to (including) 09-01-14 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_manager | * | From (including) 09-10 | Up to (including) 09-10-15 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_manager | * | From (including) 09-12 | Up to (including) 09-12-15 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_manager | * | From (including) 09-50 | Up to (including) 09-50-20 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_manager | * | From (including) 09-51 | Up to (including) 09-51-14 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/dm_manager | * | From (including) 10-10 | Up to (including) 10-10-24 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/remote_control_feature | * | From (including) 08-00 | Up to (including) 08-00-06 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/remote_control_feature | * | From (including) 08-01 | Up to (including) 08-01-03 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/remote_control_feature | * | From (including) 08-02 | Up to (including) 08-02-04 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/remote_control_feature | * | From (including) 08-10 | Up to (including) 08-10-10 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/remote_control_feature | * | From (including) 08-11 | Up to (including) 08-11-06 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/remote_control_feature | * | From (including) 08-50 | Up to (including) 08-50-04 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/remote_control_feature | * | From (including) 08-51 | Up to (including) 08-51-14 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/remote_control_feature | * | From (including) 09-00 | Up to (including) 09-00-13 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/remote_control_feature | * | From (including) 09-01 | Up to (including) 09-01-12 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/remote_control_feature | * | From (including) 09-50 | Up to (including) 09-50-20 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/remote_control_feature | * | From (including) 09-51 | Up to (including) 09-51-08 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/netm/remote_control_feature | * | From (including) 10-10 | Up to (including) 10-10-20 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/remote_control_feature | * | From (including) 11-00 | Up to (including) 11-00-02 | ||||
| 运行在以下环境 | |||||||||
| 应用 | hitachi | jp1/remote_control_feature | * | From (including) 12-00 | Up to (including) 12-00-011 | ||||
- 攻击路径 本地
- 攻击复杂度 低
- 权限要求 低
- 影响范围 未更改
- 用户交互 无
- 可用性 高
- 保密性 高
- 完整性 高
| CWE-ID | 漏洞类型 |
| CWE-269 | 特权管理不恰当 |
| NVD-CWE-noinfo |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论