Hitachi Coding Software Suite vulnerabilities

Hitachi Coding Software Suite up to version 3.3.0 contains an Incorrect Authorization vulnerability that allows an unprivileged user to perform administrator-level operations.

Hitachi Coding Software Suite up to version 3.3.0 transmits sensitive information in cleartext, allowing an attacker to eavesdrop on authentication credentials and sensitive data in transit.

Hitachi Coding Software Suite up to version 3.3.0 contains a hidden functionality vulnerability that allows an attacker to gain unauthorized access by exploiting hidden accounts or hard-coded credentials.

Hitachi Coding Software Suite up to version 3.3.0 uses a hard-coded cryptographic key for JWT signing, allowing an attacker to generate unauthorized Bearer tokens and exploit administrative functions.

Hitachi Coding Software Suite up to version 3.3.0 has missing authentication for critical functions. An unauthenticated attacker can invoke critical APIs, potentially leading to unauthorized retrieval or alteration of sensitive information.

Hitachi Coding Software Suite up to version 3.3.0 contains a Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files.