First published: Tue Aug 28 2007(Updated: )
Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Hitachi uCosminexus Application Server | =06_70_b | |
Hitachi uCosminexus Application Server | =06_70_d | |
Hitachi uCosminexus Application Server | =06_70_b | |
Hitachi ucosminexus service platform | =07_00 | |
Hitachi Cosminexus Application Server | =06_50 | |
Hitachi uCosminexus Application Server | =06_72_b | |
Hitachi uCosminexus Application Server Standard | =06_50_f | |
Hitachi uCosminexus Application Server | =06_70_b | |
Hitachi uCosminexus Application Server | =07_10 | |
Hitachi uCosminexus Application Server | =06_70 | |
Hitachi Electronic Form Workflow - Professional Library Set | =07_00_b | |
Hitachi uCosminexus Application Server | =07_00_1 | |
Hitachi uCosminexus Application Server | =06_70_b_1 | |
Hitachi uCosminexus Application Server | =07_00 | |
Hitachi uCosminexus Application Server | =06_72_1 | |
Hitachi uCosminexus Application Server | =07_10 | |
Hitachi Electronic Form Workflow - Standard Set | =07_00_b | |
Hitachi uCosminexus Application Server | =07_00 | |
Hitachi uCosminexus Application Server | =07_10_06 | |
Hitachi uCosminexus Application Server | =06_71_b | |
Hitachi uCosminexus Application Server | =06_70_b | |
Hitachi Cosminexus Application Server | =06_50_c_1 | |
Hitachi uCosminexus Application Server Standard | =06_51_b_1 | |
Hitachi uCosminexus Application Server | =07_00 | |
Hitachi uCosminexus Application Server Standard | =06_50_e_1 | |
Hitachi uCosminexus Application Server | =06_71 | |
Hitachi uCosminexus Application Server | =06_72_1 | |
Hitachi Cosminexus Application Server | =06_50_e_1 | |
Hitachi uCosminexus Application Server | =06_70 | |
Hitachi uCosminexus Application Server | =07_00_12 | |
Hitachi Cosminexus Application Server | =06_51_b_1 | |
Hitachi uCosminexus Application Server | =06_70_b_1 | |
Hitachi uCosminexus Application Server | =06_70_b | |
Hitachi uCosminexus Application Server Standard | =06_50_c_1 | |
Hitachi uCosminexus Application Server | =07_10_08 | |
Hitachi uCosminexus Application Server | =06_71_b | |
Hitachi uCosminexus Application Server | =07_10 | |
Hitachi uCosminexus Application Server | =07_10 | |
Hitachi uCosminexus Application Server | =07_00 | |
Hitachi uCosminexus Application Server | =07_10 | |
Hitachi uCosminexus Application Server | =06_70_b | |
Hitachi uCosminexus Application Server Standard | =06_50 | |
Hitachi uCosminexus Application Server | =06_72_g | |
Hitachi uCosminexus Application Server Standard | =06_51_c | |
Hitachi uCosminexus Application Server | =07_00 | |
Hitachi uCosminexus Application Server | =07_10 | |
Hitachi uCosminexus Application Server Standard | =06_50_c_1 | |
Hitachi uCosminexus Application Server | =06_71_c | |
Hitachi Cosminexus Application Server | =06_51_c | |
Hitachi uCosminexus Application Server | =07_10_1 | |
Hitachi uCosminexus Application Server | =06_70_a | |
Hitachi Cosminexus Application Server | =06_50_f | |
Hitachi uCosminexus Application Server Standard | =06_50_c | |
Hitachi Electronic Form Workflow - Standard Set | =07_00 | |
Hitachi Cosminexus Application Server | =06_50_b | |
Hitachi uCosminexus Application Server | =06_72_c | |
Hitachi uCosminexus Application Server | =06_70_b | |
Hitachi uCosminexus Application Server | =07-00-01 | |
Hitachi Cosminexus Application Server | =06_50_c | |
Hitachi uCosminexus Application Server | =06_71 | |
Hitachi uCosminexus Application Server | =06_70_b | |
Hitachi ucosminexus service platform | =07_10 | |
Hitachi uCosminexus Application Server | =06_72_b_1 | |
Hitachi uCosminexus Application Server | =06_72_b | |
Hitachi uCosminexus Application Server | =06_70 | |
Hitachi Electronic Form Workflow - Professional Library Set | =07_00 | |
Hitachi uCosminexus Application Server Standard | =06_51 | |
Hitachi Cosminexus Application Server | =06_50 | |
Hitachi uCosminexus Application Server | =07_10 | |
Hitachi Cosminexus Application Server | =06_50 | |
Hitachi uCosminexus Application Server | =06_70_c | |
Hitachi ucosminexus service platform | =07_10 | |
Hitachi uCosminexus Application Server | =07_10 | |
Hitachi Cosminexus Application Server | =06_51 | |
Hitachi uCosminexus Application Server | =06_72_d | |
Hitachi uCosminexus Application Server | =06_70_a | |
Hitachi uCosminexus Application Server Standard | =06_50 | |
Hitachi uCosminexus Application Server Standard | =06_50 | |
Hitachi Cosminexus Application Server | =06_50_c_1 | |
Hitachi uCosminexus Application Server | =06_71_b | |
Hitachi uCosminexus Application Server | =07_10 | |
Hitachi uCosminexus Application Server | =06_70_d | |
Hitachi uCosminexus Application Server Standard | =06_50 | |
Hitachi uCosminexus Application Server | =07_00 | |
Hitachi uCosminexus Application Server Standard | =06_50 | |
Hitachi uCosminexus Application Server | =06_70_a | |
Hitachi Cosminexus Application Server | =06_50 | |
Hitachi uCosminexus Application Server | =07_00 | |
Hitachi Cosminexus Application Server | =06_50 | |
Hitachi uCosminexus Application Server | =06_70_g | |
Hitachi uCosminexus Application Server | =07_00 | |
Hitachi uCosminexus Application Server | =06_72_g | |
Hitachi uCosminexus Application Server Standard | =06_51 | |
Hitachi uCosminexus Application Server | =06_70_a | |
Hitachi uCosminexus Application Server Standard | =06_50_b |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-4564 is rated as a high severity vulnerability due to the potential for privilege escalation.
To fix CVE-2007-4564, update your Cosminexus Application Server or Service Platform to the latest version that includes the security patch.
CVE-2007-4564 affects users of Cosminexus Application Server versions 06-70 and later, as well as certain versions of Hitachi Electronic Form Workflow.
CVE-2007-4564 can facilitate local privilege escalation attacks by allowing unauthorized users to gain elevated permissions.
As a temporary measure, limit local user access to systems running vulnerable versions of the Cosminexus software until an update can be applied.