medium4.4
CVE-2007-4563
Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which all…
Impact
Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hitachi | Cosminexus Application Server Enterprise | Versions 06_50, 06_50_b, 06_50_c, 06_50_c_1, 06_50_e_1, 06_50_f |
| Hitachi | Cosminexus Application Server Standard | Versions 06_50, 06_50_b, 06_50_c, 06_50_c_1, 06_50_e_1, 06_50_f |
| Hitachi | Electronic Form Workflow - Standard Set | Versions 07_00, 07_00_b |
| Hitachi | Electronic Form Workflow -Professional Library Set | Versions 07_00, 07_00_b |
| Hitachi | Ucosminexus Application Server Enterprise | Versions 06_70, 06_70_a, 06_70_b, 06_70_b_1, 06_70_d, 06_70_g |
| Hitachi | Ucosminexus Application Server Standard | Versions 06_70, 06_70_a, 06_70_b, 06_70_b_1, 06_70_c, 06_70_d |
| Hitachi | Ucosminexus Service Platform | Versions 07_00, 07_10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/37854
- http://secunia.com/advisories/26589
- http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html
- http://www.securityfocus.com/bid/25434
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36245
- http://osvdb.org/37854
- http://secunia.com/advisories/26589
- http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html
- http://www.securityfocus.com/bid/25434
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36245