First published: Mon Nov 05 2007(Updated: )
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Hitachi Web Server | =02_02 | |
Hitachi uCosminexus Application Server | <=07_50_01 | |
Hitachi uCosminexus | <=07_50_01 | |
Hitachi Web Server | =01_02_d | |
Hitachi Web Server | =02_00 | |
Hitachi Cosminexus Application Server | <=06_51_j | |
Hitachi Web Server | =02_04_b | |
Hitachi uCosminexus | <=06_71_d | |
Hitachi uCosminexus Developer Standard | <=06_51_j | |
Hitachi ucosminexus service platform | <=07_50_01 | |
Hitachi Web Server | =02_00 | |
Hitachi Web Server | =03_00 | |
Hitachi Web Server | =02_04_b | |
Hitachi Web Server | =02_02 | |
Hitachi uCosminexus Application Server Standard | <=06_51_j | |
Hitachi Web Server | =01_02_e | |
Hitachi Cosminexus Server | <=04_01 | |
Hitachi Web Server | =03_00_01 | |
Hitachi uCosminexus Application Server | <=07_50_01 | |
Hitachi Cosminexus Developer Professional Version 6 | <=07_50_01 | |
Hitachi Web Server | =02_02 | |
Hitachi Web Server | =02_00 | |
Hitachi Web Server | =01_00 | |
Hitachi Web Server | =03_00 | |
Hitachi Web Server | =01_01 | |
Hitachi Cosminexus Developer Professional Version 6 | <=06_51_j | |
Hitachi Web Server | =02_06_a | |
Hitachi Cosminexus Developer Light Version 6 | <=06_51_j | |
Hitachi Web Server | =01_01 | |
Hitachi Web Server | =03_00 | |
Hitachi Web Server | =01_01 | |
Hitachi Web Server | =02_04_b | |
Hitachi Web Server | =01_00 | |
Hitachi Web Server | =02_00 | |
Hitachi Web Server | =02_00_a | |
Hitachi Web Server | =02_00 | |
Hitachi Web Server | =01_01_d | |
Hitachi Web Server | =02_04_b | |
Hitachi Web Server | =02_00 | |
Hitachi Web Server | =03_00_01 | |
Hitachi Web Server | =01_02_d | |
Hitachi Web Server | =02_04_b | |
Hitachi Web Server | =03_00 | |
Hitachi ucosminexus Service Architect | <=07_50_01 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-5810 has a medium severity rating due to its potential to allow remote authentication spoofing.
To fix CVE-2007-5810, update the affected Hitachi Web Server or Cosminexus products to the latest versions that include the necessary security patches.
CVE-2007-5810 affects multiple versions of Hitachi Web Server and various versions of Cosminexus products.
Yes, CVE-2007-5810 can allow attackers to spoof authentication, potentially leading to unauthorized access.
Currently, applying the latest security updates is the recommended solution for mitigating CVE-2007-5810.