Impact
The vulnerability allows an attacker to bypass the JP1/Automatic Job Management System 3 Manager authentication mechanism. An unauthenticated user can assume privileged access, enabling them to view, modify, or delete job configurations, trigger arbitrary jobs, and potentially compromise the entire managed infrastructure. This flaw permits full compromise of confidentiality, integrity, and availability of the system.
Affected Systems
The vulnerability impacts Hitachi JP1/Automatic Job Management System 3 – Manager versions 10‑00 through any release prior to 13‑50‑31. Users running any of these affected releases should verify their installed version and determine whether they are within the vulnerable range.
Risk and Exploitability
The flaw carries a CVSS score of 9.8, classifying it as critical. The EPSS score is currently unavailable, but the lack of a KEV listing does not diminish the high exploitation potential for an organization that runs the affected system. The attack vector is not explicitly stated in the advisory; however, authentication bypass normally indicates a remote or local exploit capable of injecting crafted credentials or requests, so it is prudent to assume a remote possibility until proven otherwise.
OpenCVE Enrichment