CVE:CVE-2018-21033
CNNVD:CNNVD-202002-801
Hitachi Command Suite是日本日立（Hitachi）公司的一套统一管理存储系统。该系统提供存储资源管理、分层存储管理、性能与服务水平管理等存储管理功能。
Hitachi Command Suite 8.6.2-00之前版本、Hitachi Automation Director 8.6.2-00之前版本和Hitachi Infrastructure Analytics Advisor 4.2.0-00之前版本中存在输入验证错误漏洞。远程攻击者可利用该漏洞加载任意级联样式表(CSS)的令牌序列。
solution:Upgrade hitachi device_manager to a higher version than 8.6.2-00,and avoid the version (,8.6.2-00); Upgrade hitachi compute_systems_manager to a higher version than 8.6.2-00,and avoid the version (,8.6.2-00); Upgrade hitachi automation_director to a higher version than 8.6.2-00,and avoid the version (,8.6.2-00); Upgrade hitachi tiered_storage_manager to a higher version than 8.6.2-00,and avoid the version (,8.6.2-00); Upgrade hitachi replication_manager to a higher version than 8.6.2-00,and avoid the version (,8.6.2-00); Upgrade hitachi tuning_manager to a higher version than 8.6.2-00,and avoid the version (,8.6.2-00); Upgrade hitachi global_link_manager to a higher version than 8.6.2-00,and avoid the version (,8.6.2-00); Upgrade hitachi infrastructure_analytics_advisor to a higher version than 4.2.0-00,and avoid the version (,4.2.0-00)