CVE-2023-6814: Information Exposure Vulnerability in Cosminexus Component Container

Severity: medium (CVSS 5.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-12 · updated 2026-06-17
Weakness: CWE-532

Description

Insertion of Sensitive Information into Log File vulnerability in Hitachi Cosminexus Component Container allows local users to gain sensitive information.This issue affects Cosminexus Component Container: from 11-30 before 11-30-05, from 11-20 before 11-20-07, from 11-10 before 11-10-10, from 11-00 before 11-00-12, All versions of V8 and V9.

Affected products

Hitachi Cosminexus Component Container: from 11-30 before 11-30-05; from 11-20 before 11-20-07; from 11-10 before 11-10-10; from 11-00 before 11-00-12; 09-.x from 08-00 — fixed in 11-00-12, 11-10-10, 11-20-07, 11-30-05

How to fix

Upgrade to a fixed version: Hitachi Cosminexus Component Container 11-00-12, 11-10-10, 11-20-07, 11-30-05. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-6814 or the next vulnerability affects your stack