medium5.0
CVE-2007-5810
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote…
Impact
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hitachi | Cosminexus Application Server Enterprise | through 06_51_j |
| Hitachi | Cosminexus Application Server Standard | through 06_51_j |
| Hitachi | Cosminexus Developer Light Version 6 | through 06_51_j |
| Hitachi | Cosminexus Developer Professional Version 6 | through 06_51_j |
| Hitachi | Cosminexus Developer Standard Version 6 | through 06_51_j |
| Hitachi | Cosminexus Server | through 04_01 |
| Hitachi | Ucosminexus Application Server Enterprise | through 07_50_01 |
| Hitachi | Ucosminexus Application Server Standard | through 07_50_01 |
| Hitachi | Ucosminexus Developer Light | through 06_71_d |
| Hitachi | Ucosminexus Developer Professional | through 07_50_01 |
| Hitachi | Ucosminexus Developer Standard | through 07_50_01 |
| Hitachi | Ucosminexus Service Architect | through 07_50_01 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/42026
- http://secunia.com/advisories/27421
- http://www.hitachi-support.com/security_e/vuls_e/HS07-034_e/index-e.html
- http://www.securityfocus.com/bid/26271
- http://www.vupen.com/english/advisories/2007/3666
- http://osvdb.org/42026
- http://secunia.com/advisories/27421
- http://www.hitachi-support.com/security_e/vuls_e/HS07-034_e/index-e.html
- http://www.securityfocus.com/bid/26271
- http://www.vupen.com/english/advisories/2007/3666