CVEvulnerability
CVE-2007-4563
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-08-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.
Affected configurations
• hitachi cosminexus application server enterprise 06 50
• hitachi cosminexus application server enterprise 06 50 b
• hitachi cosminexus application server enterprise 06 50 c
• hitachi cosminexus application server enterprise 06 50 c 1
• hitachi cosminexus application server enterprise 06 50 e 1
• hitachi cosminexus application server enterprise 06 50 f
• hitachi cosminexus application server enterprise 06 51
• hitachi cosminexus application server enterprise 06 51 b 1
• hitachi cosminexus application server enterprise 06 51 c
• hitachi cosminexus application server standard 06 50
• hitachi cosminexus application server standard 06 50 b
• hitachi cosminexus application server standard 06 50 c
• hitachi cosminexus application server standard 06 50 c 1
• hitachi cosminexus application server standard 06 50 e 1
• hitachi cosminexus application server standard 06 50 f
• hitachi cosminexus application server standard 06 51
• hitachi cosminexus application server standard 06 51 b 1
• hitachi cosminexus application server standard 06 51 c
• hitachi electronic form workflow - standard set 07 00
• hitachi electronic form workflow - standard set 07 00 b
• hitachi electronic form workflow -professional library set 07 00
• hitachi electronic form workflow -professional library set 07 00 b
• hitachi ucosminexus application server enterprise 06 70
• hitachi ucosminexus application server enterprise 06 70 a
• hitachi ucosminexus application server enterprise 06 70 b
• hitachi ucosminexus application server enterprise 06 70 b 1
• hitachi ucosminexus application server enterprise 06 70 d
• hitachi ucosminexus application server enterprise 06 70 g
• hitachi ucosminexus application server enterprise 06 71
• hitachi ucosminexus application server enterprise 06 71 b
• hitachi ucosminexus application server enterprise 06 71 c
• hitachi ucosminexus application server enterprise 06 72 1
• hitachi ucosminexus application server enterprise 06 72 b
• hitachi ucosminexus application server enterprise 06 72 g
• hitachi ucosminexus application server enterprise 07-00-01
• hitachi ucosminexus application server enterprise 07 00
• hitachi ucosminexus application server enterprise 07 00 12
• hitachi ucosminexus application server enterprise 07 10
• hitachi ucosminexus application server enterprise 07 10 1
• hitachi ucosminexus application server enterprise 07 10 06
• hitachi ucosminexus application server enterprise 07 10 08
• hitachi ucosminexus application server standard 06 70
• hitachi ucosminexus application server standard 06 70 a
• hitachi ucosminexus application server standard 06 70 b
• hitachi ucosminexus application server standard 06 70 b 1
• hitachi ucosminexus application server standard 06 70 c
• hitachi ucosminexus application server standard 06 70 d
• hitachi ucosminexus application server standard 06 71
• hitachi ucosminexus application server standard 06 71 b
• hitachi ucosminexus application server standard 06 72 1
• hitachi ucosminexus application server standard 06 72 b 1
• hitachi ucosminexus application server standard 06 72 c
• hitachi ucosminexus application server standard 06 72 d
• hitachi ucosminexus application server standard 06 72 g
• hitachi ucosminexus application server standard 07 00
• hitachi ucosminexus application server standard 07 00 1
• hitachi ucosminexus application server standard 07 10
• hitachi ucosminexus service platform 07 00
• hitachi ucosminexus service platform 07 10
Related
Weakness · not in database (1)
References
- http://osvdb.org/37854 osvdb.org
- http://secunia.com/advisories/26589 Patch, Vendor Advisory
- http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html Patch
- http://www.securityfocus.com/bid/25434 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36245 exchange.xforce.ibmcloud.com
- http://osvdb.org/37854 osvdb.org
- http://secunia.com/advisories/26589 Patch, Vendor Advisory
- http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html Patch
- http://www.securityfocus.com/bid/25434 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36245 exchange.xforce.ibmcloud.com