medium4.9
CVE-2007-4124
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use sess…
Impact
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hitachi | Cosminexus Application Server | Version 6 |
| Hitachi | Cosminexus Collaboration Portal | All versions |
| Hitachi | Cosminexus Developer | Version 6 |
| Hitachi | Cosminexus Erp Integrator | All versions |
| Hitachi | Cosminexus Opentp1 Web Front-End Set | All versions |
| Hitachi | Electronic Form Workflow | All versions |
| Hitachi | Groupmax Collaboration Portal | All versions |
| Hitachi | Ucosminexus Application Server | All versions |
| Hitachi | Ucosminexus Collaboration Portal | All versions |
| Hitachi | Ucosminexus Developer | All versions |
| Hitachi | Ucosminexus Erp Integrator | All versions |
| Hitachi | Ucosminexus Opentp1 Web Front-End Set | All versions |
References
- NVD record
- CVE.org record
- http://osvdb.org/37852
- http://secunia.com/advisories/26250
- http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html
- http://www.securityfocus.com/bid/25145
- http://www.vupen.com/english/advisories/2007/2725
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35706
- http://osvdb.org/37852
- http://secunia.com/advisories/26250
- http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html
- http://www.securityfocus.com/bid/25145
- http://www.vupen.com/english/advisories/2007/2725
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35706