CVE-2007-4564: Medium severity Hitachi Ucosminexus Application Server Standard vulnerability

Published Aug 28, 2007
·
Updated

Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges.

Affected Software

95 affected components
Hitachi Ucosminexus Application Server Standard=06_70_b
Hitachi Ucosminexus Application Server Standard=06_70_d
Hitachi Ucosminexus Application Server Standard=06_70_b
Hitachi uCosminexus Service Platform=07_00
Hitachi Cosminexus Application Server Enterprise=06_50
Hitachi Ucosminexus Application Server Enterprise=06_72_b
Hitachi Cosminexus Application Server Standard=06_50_f
Hitachi Ucosminexus Application Server Enterprise=06_70_b
Hitachi Ucosminexus Application Server Standard=07_10
Hitachi Ucosminexus Application Server Standard=06_70
Hitachi Electronic Form Workflow -professional Library Set=07_00_b
Hitachi Ucosminexus Application Server Standard=07_00_1
Hitachi Ucosminexus Application Server Standard=06_70_b_1
Hitachi Ucosminexus Application Server Enterprise=07_00
Hitachi Ucosminexus Application Server Standard=06_72_1
Hitachi Ucosminexus Application Server Enterprise=07_10
Hitachi Electronic Form Workflow - Standard Set=07_00_b
Hitachi Ucosminexus Application Server Standard=07_00
Hitachi Ucosminexus Application Server Enterprise=07_10_06
Hitachi Ucosminexus Application Server Enterprise=06_71_b
Hitachi Ucosminexus Application Server Standard=06_70_b
Hitachi Cosminexus Application Server Enterprise=06_50_c_1
Hitachi Cosminexus Application Server Standard=06_51_b_1
Hitachi Ucosminexus Application Server Standard=07_00
Hitachi Cosminexus Application Server Standard=06_50_e_1
Hitachi Ucosminexus Application Server Standard=06_71
Hitachi Ucosminexus Application Server Enterprise=06_72_1
Hitachi Cosminexus Application Server Enterprise=06_50_e_1
Hitachi Ucosminexus Application Server Enterprise=06_70
Hitachi Ucosminexus Application Server Enterprise=07_00_12
Hitachi Cosminexus Application Server Enterprise=06_51_b_1
Hitachi Ucosminexus Application Server Enterprise=06_70_b_1
Hitachi Ucosminexus Application Server Enterprise=06_70_b
Hitachi Cosminexus Application Server Standard=06_50_c_1
Hitachi Ucosminexus Application Server Enterprise=07_10_08
Hitachi Ucosminexus Application Server Enterprise=06_71_b
Hitachi Ucosminexus Application Server Enterprise=07_10
Hitachi Ucosminexus Application Server Standard=07_10
Hitachi Ucosminexus Application Server Enterprise=07_00
Hitachi Ucosminexus Application Server Enterprise=07_10
Hitachi Ucosminexus Application Server Enterprise=06_70_b
Hitachi Cosminexus Application Server Standard=06_50
Hitachi Ucosminexus Application Server Standard=06_72_g
Hitachi Cosminexus Application Server Standard=06_51_c
Hitachi Ucosminexus Application Server Enterprise=07_00
Hitachi Ucosminexus Application Server Standard=07_10
Hitachi Cosminexus Application Server Standard=06_50_c_1
Hitachi Ucosminexus Application Server Enterprise=06_71_c
Hitachi Cosminexus Application Server Enterprise=06_51_c
Hitachi Ucosminexus Application Server Enterprise=07_10_1
Hitachi Ucosminexus Application Server Enterprise=06_70_a
Hitachi Cosminexus Application Server Enterprise=06_50_f
Hitachi Cosminexus Application Server Standard=06_50_c
Hitachi Electronic Form Workflow - Standard Set=07_00
Hitachi Cosminexus Application Server Enterprise=06_50_b
Hitachi Ucosminexus Application Server Standard=06_72_c
Hitachi Ucosminexus Application Server Standard=06_70_b
Hitachi Ucosminexus Application Server Enterprise=07-00-01
Hitachi Cosminexus Application Server Enterprise=06_50_c
Hitachi Ucosminexus Application Server Enterprise=06_71
Hitachi Ucosminexus Application Server Enterprise=06_70_b
Hitachi uCosminexus Service Platform=07_10
Hitachi Ucosminexus Application Server Standard=06_72_b_1
Hitachi Ucosminexus Application Server Enterprise=06_72_b
Hitachi Ucosminexus Application Server Enterprise=06_70
Hitachi Electronic Form Workflow -professional Library Set=07_00
Hitachi Cosminexus Application Server Standard=06_51
Hitachi Cosminexus Application Server Enterprise=06_50
Hitachi Ucosminexus Application Server Enterprise=07_10
Hitachi Cosminexus Application Server Enterprise=06_50
Hitachi Ucosminexus Application Server Standard=06_70_c
Hitachi uCosminexus Service Platform=07_10
Hitachi Ucosminexus Application Server Enterprise=07_10
Hitachi Cosminexus Application Server Enterprise=06_51
Hitachi Ucosminexus Application Server Standard=06_72_d
Hitachi Ucosminexus Application Server Enterprise=06_70_a
Hitachi Cosminexus Application Server Standard=06_50
Hitachi Cosminexus Application Server Standard=06_50
Hitachi Cosminexus Application Server Enterprise=06_50_c_1
Hitachi Ucosminexus Application Server Standard=06_71_b
Hitachi Ucosminexus Application Server Standard=07_10
Hitachi Ucosminexus Application Server Enterprise=06_70_d
Hitachi Cosminexus Application Server Standard=06_50
Hitachi Ucosminexus Application Server Enterprise=07_00
Hitachi Cosminexus Application Server Standard=06_50
Hitachi Ucosminexus Application Server Standard=06_70_a
Hitachi Cosminexus Application Server Enterprise=06_50
Hitachi Ucosminexus Application Server Standard=07_00
Hitachi Cosminexus Application Server Enterprise=06_50
Hitachi Ucosminexus Application Server Enterprise=06_70_g
Hitachi Ucosminexus Application Server Standard=07_00
Hitachi Ucosminexus Application Server Enterprise=06_72_g
Hitachi Cosminexus Application Server Standard=06_51
Hitachi Ucosminexus Application Server Standard=06_70_a
Hitachi Cosminexus Application Server Standard=06_50_b

Remediation

Patch Available

http://secunia.com/advisories/26589

Event History

Aug 28, 2007
CVE Published
01:17 AM
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2007-4564?

CVE-2007-4564 is rated as a high severity vulnerability due to the potential for privilege escalation.

2

How do I fix CVE-2007-4564?

To fix CVE-2007-4564, update your Cosminexus Application Server or Service Platform to the latest version that includes the security patch.

3

Who is affected by CVE-2007-4564?

CVE-2007-4564 affects users of Cosminexus Application Server versions 06-70 and later, as well as certain versions of Hitachi Electronic Form Workflow.

4

What types of attacks can CVE-2007-4564 facilitate?

CVE-2007-4564 can facilitate local privilege escalation attacks by allowing unauthorized users to gain elevated permissions.

5

Is there a workaround for CVE-2007-4564?

As a temporary measure, limit local user access to systems running vulnerable versions of the Cosminexus software until an update can be applied.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203