CVE-2007-4124
First published: Wed Aug 01 2007(Updated: )
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hitachi Ucosminexus Collaboration Portal | ||
| Hitachi Cosminexus Opentp1 Web Front-end Set | ||
| Hitachi Ucosminexus Erp Integrator | ||
| Hitachi Cosminexus Developer | =6 | |
| Hitachi Ucosminexus Application Server | ||
| Hitachi Ucosminexus Service Platform | ||
| Hitachi Ucosminexus Developer | ||
| Hitachi Electronic Form Workflow | ||
| Hitachi Cosminexus Application Server | =6 | |
| Hitachi Ucosminexus Opentp1 Web Front-end Set | ||
| Hitachi Ucosminexus Application Server | ||
| Hitachi Cosminexus Developer | =6 | |
| Hitachi Ucosminexus Developer | ||
| Hitachi Ucosminexus Developer | ||
| Hitachi Cosminexus Application Server | =6 | |
| Hitachi Cosminexus Developer | =6 | |
| Hitachi Cosminexus Erp Integrator | ||
| Hitachi Cosminexus Collaboration Portal | ||
| Hitachi Groupmax Collaboration Portal | ||
| Hitachi Electronic Form Workflow | ||
| Hitachi Ucosminexus Service Architect | ||
| Hitachi Electronic Form Workflow |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/author
- agent/weakness
- agent/severity
- agent/tags
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/hitachi
- canonical/hitachi ucosminexus collaboration portal
- canonical/hitachi cosminexus opentp1 web front-end set
- canonical/hitachi ucosminexus erp integrator
- canonical/hitachi cosminexus developer
- version/hitachi cosminexus developer/6
- canonical/hitachi ucosminexus application server
- canonical/hitachi ucosminexus service platform
- canonical/hitachi ucosminexus developer
- canonical/hitachi electronic form workflow
- canonical/hitachi cosminexus application server
- version/hitachi cosminexus application server/6
- canonical/hitachi ucosminexus opentp1 web front-end set
- canonical/hitachi cosminexus erp integrator
- canonical/hitachi cosminexus collaboration portal
- canonical/hitachi groupmax collaboration portal
- canonical/hitachi ucosminexus service architect