The vulnerability in Hitachi Ops Center Administrator allows an attacker to retrieve internal application data, leading to potential exposure of sensitive information. The weakness originates from improper handling of confidentiality controls (CWE‑209). No escalation to higher privileges or code execution is described; the issue simply results in disclosure of data that should remain internal.

The flaw affects installations of Hitachi Ops Center Administrator with versions earlier than 11.0.9-01. No other vendors or product lines are mentioned.

The CVSS score of 4.3 classifies this as a moderate severity vulnerability, while the EPSS score of less than 1% indicates a very low likelihood of exploitation at the time of this assessment. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, the likely attack vector involves access to the application’s internal APIs or UI, possibly requiring user authentication but not elevated privileges. The impact would be limited to information exposure rather than integrity or availability compromise.