CVE-2026-3314 Information disclosure in Hitachi Infrastructure Analytics Advisor
Attackers can view unmasked passwords in Hitachi Ops Center and Infrastructure Analytics Advisor interfaces, potentially leading to credential theft.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-3314?
CVE-2026-3314 is a medium-severity vulnerability in Hitachi Infrastructure Analytics Advisor, published on 26 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe modules), Hitachi Ops Center Analyzer viewpoint, Hitachi Infrastructure Analytics Advisor (Data Center Analytics, Analytics probe modules).
This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.8-00; Hitachi Ops Center Analyzer viewpoint: from 10.8.1-00 before 11.0.8-00; Hitachi Infrastructure Analytics Advisor: from 3.2.0-00 before 11.0.8-00.
Weakness: CWE-549
Which versions are affected by CVE-2026-3314?
How do I fix CVE-2026-3314?
No fix has been published for CVE-2026-3314 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-3314 being exploited?
There is no known exploitation of CVE-2026-3314 in the wild and no public exploit code.
Sources
Also known as GHSA-43h6-xxqh-8cxp.