Published date:January 16, 2020
Hitachi, Ltd. IT Platform Products Management Division
Hitachi Disk Array Systems have the following vulnerability.
Hitachi-sec-2020-301
An information disclosure vulnerability exists in STARTTLS when using LDAP authentication server and/or authorization server with STARTTLS.
The following table shows the affected products.
Product Name | Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900 Hitachi Virtual Storage Platform F350, F370, F700, F900 |
---|---|
Micro-program version | DKCMIAN Ver. 88-03-22-x0/00 or later, SVP/MPC Ver. 88-03-22-x0/00 or later |
Product Name | Hitachi Virtual Storage Platform G100, G200, G400, G600, G800 Hitachi Virtual Storage Platform F400, F600, F800 Hitachi Virtual Storage Platform N400, N600, N800 |
---|---|
Micro-program version | DKCMAIN Ver. 83-05-29-x0/00 or later, SVP Ver. 83-05-29-x0/00 or later |
Product Name | Hitachi Unified Storage VM (HUS VM) |
---|---|
Micro-program version | DKCMAIN Ver. 73-03-63-x0/00 or later, SVP Ver. 73-03-60/00 or later |
Product Name | Hitachi Virtual Storage Platform 5100, 5500 Hitachi Virtual Storage Platform 5100H, 5500H |
---|---|
Micro-program version | All current version |
Product Name | Hitachi Virtual Storage Platform G1000, G1500 Hitachi Virtual Storage Platform F1500 Hitachi Virtual Storage Platform VX7 |
---|---|
Micro-program version | DKCMAIN Ver. 80-06-63-00/00 or later, SVP Ver. 80-06-62/00 or later |
Product Name | Hitachi Virtual Storage Platform Hitachi Virtual Storage Platform VP9500 |
---|---|
Micro-program version | DKCMAIN Ver. 70-06-60-00/00 or later, SVP Ver. 70-06-44/00 or later |
Use LDAP over SSL/TLS for LDAP authentication server and/or authorization server.
See Storage Navigator User Guide/System Administrator Guide to change
Product Name | Section Name |
---|---|
Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900 Hitachi Virtual Storage Platform F350, F370, F700, F900 |
Connecting authentication and authorization servers |
Hitachi Virtual Storage Platform G100, G200, G400, G600, G800 Hitachi Virtual Storage Platform F400, F600, F800 Hitachi Virtual Storage Platform N400, N600, N800 |
Connecting authentication and authorization servers |
Hitachi Unified Storage VM (HUS VM) | Using an authentication server and authorization server |
Hitachi Virtual Storage Platform 5100, 5500 Hitachi Virtual Storage Platform 5100H, 5500H |
Connecting authentication and authorization servers |
Hitachi Virtual Storage Platform G1000, G1500 Hitachi Virtual Storage Platform F1500 Hitachi Virtual Storage Platform VX7 |
Connecting authentication and authorization servers |
Hitachi Virtual Storage Platform Hitachi Virtual Storage Platform VP9500 |
Using an authentication server and authorization server |