CVEvulnerability

CVE-2007-5810

5.0 MEDIUM Published 2007-11-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-11-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-20

Description

Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.

Affected configurations

• hitachi cosminexus application server enterprise (<= 06 51 j) • hitachi cosminexus application server standard (<= 06 51 j) • hitachi cosminexus developer light version 6 (<= 06 51 j) • hitachi cosminexus developer professional version 6 (<= 06 51 j) • hitachi cosminexus developer standard version 6 (<= 06 51 j) • hitachi cosminexus server (<= 04 01) • hitachi ucosminexus application server enterprise (<= 07 50 01) • hitachi ucosminexus application server standard (<= 07 50 01) • hitachi ucosminexus developer light (<= 06 71 d) • hitachi ucosminexus developer professional (<= 07 50 01) • hitachi ucosminexus developer standard (<= 07 50 01) • hitachi ucosminexus service architect (<= 07 50 01) • hitachi ucosminexus service platform (<= 07 50 01) • hitachi web server 01 00 • hitachi web server 01 01 • hitachi web server 01 01 d • hitachi web server 01 02 d • hitachi web server 01 02 e • hitachi web server 02 00 • hitachi web server 02 00 a • hitachi web server 02 02 • hitachi web server 02 04 b • hitachi web server 02 06 a • hitachi web server 03 00 • hitachi web server 03 00 01

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References