CVE-2007-4124
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote…
Does this matter?
Lower severity and a low EPSS score (1.01%). Track it; it rarely justifies an emergency change on its own.
Description
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.
- CVSS 2.0
- 4.9 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:N
- EPSS
- 1.01% probability · 61th percentile
- CISA KEV
- Not listed
- Affected
- hitachi/cosminexus application server · hitachi/cosminexus collaboration portal · hitachi/cosminexus developer · hitachi/cosminexus erp integrator · hitachi/cosminexus opentp1 web front-end set · hitachi/electronic form workflow · hitachi/groupmax collaboration portal · hitachi/ucosminexus application server · hitachi/ucosminexus collaboration portal · hitachi/ucosminexus developer · hitachi/ucosminexus erp integrator · hitachi/ucosminexus opentp1 web front-end set · hitachi/ucosminexus service architect · hitachi/ucosminexus service platform
- Source
- cve@mitre.org
References
- http://osvdb.org/37852
- http://secunia.com/advisories/26250Vendor Advisory
- http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/25145
- http://www.vupen.com/english/advisories/2007/2725
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35706
- http://osvdb.org/37852
- http://secunia.com/advisories/26250Vendor Advisory
- http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/25145
- http://www.vupen.com/english/advisories/2007/2725
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35706
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.