This vulnerability (CVE-2025-7386) in Hitachi Storage Navigator allows information exposure due to insufficiently protected credentials (CWE-522). It affects Hitachi Virtual Storage Platform models 5100, 5200, 5500, 5600, including H and VX8 variants, and G1000, G1500, F1500, VX7 models running versions prior to DKCMAIN Ver. 90-09-24-00/00 or 90-08-86-00/00 and SVP Ver. 90-09-24/00 or 80-06-91/00. The vulnerability could allow an attacker with high privileges to obtain sensitive credential information, impacting confidentiality but not integrity or availability. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, and scope changed. No vendor advisory or patch information is currently available.

The vulnerability exposes sensitive credential information, potentially allowing attackers with high privileges to access confidential data. This compromises confidentiality but does not affect integrity or availability. Exploitation requires network access and high privileges, with no user interaction needed. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to affected systems to trusted administrators only and monitor for unusual access patterns. Follow vendor communications for updates on patches or mitigations.