CVE-2007-4124
mediumpriority · track · 20EPSS 0.010 · 63 %ileEUUSEPSS · scored 2026-10-28
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (15)
Products and version ranges known to be affected.
- hitachi cosminexus application server= 6nvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus collaboration portalall versionsnvdUScpe:2.3:a:hitachi:cosminexus_collaboration_portal:*:*:*:*:*:*:*:*
- hitachi cosminexus erp integratorall versionsnvdUScpe:2.3:a:hitachi:cosminexus_erp_integrator:*:*:*:*:*:*:*:*
- hitachi cosminexus opentp1 web front-end setall versionsnvdUScpe:2.3:a:hitachi:cosminexus_opentp1_web_front-end_set:*:*:*:*:*:*:*:*
- hitachi electronic form workflowall versionsnvdUScpe:2.3:a:hitachi:electronic_form_workflow:*:*:*:*:*:*:*:*
- hitachi groupmax collaboration portalall versionsnvdUScpe:2.3:a:hitachi:groupmax_collaboration_portal:*:*:*:*:*:*:*:*
- hitachi ucosminexus application serverall versionsnvdUScpe:2.3:a:hitachi:ucosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi ucosminexus collaboration portalall versionsnvdUScpe:2.3:a:hitachi:ucosminexus_collaboration_portal:*:*:*:*:*:*:*:*
- hitachi ucosminexus developerall versionsnvdUScpe:2.3:a:hitachi:ucosminexus_developer:*:*:*:*:*:*:*:*
- hitachi ucosminexus erp integratorall versionsnvdUScpe:2.3:a:hitachi:ucosminexus_erp_integrator:*:*:*:*:*:*:*:*
- hitachi ucosminexus opentp1 web front-end setall versionsnvdUScpe:2.3:a:hitachi:ucosminexus_opentp1_web_front-end_set:*:*:*:*:*:*:*:*
- hitachi ucosminexus service architectall versionsnvdUScpe:2.3:a:hitachi:ucosminexus_service_architect:*:*:*:*:*:*:*:*
- hitachi ucosminexus service platformall versionsnvdUScpe:2.3:a:hitachi:ucosminexus_service_platform:*:*:*:*:*:*:*:*
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (12)
External citations — patches, advisories, analysis.
- http://osvdb.org/37852enisa_euvd
- http://secunia.com/advisories/26250enisa_euvd
- http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.htmlenisa_euvd
- http://www.securityfocus.com/bid/25145enisa_euvd
- http://www.vupen.com/english/advisories/2007/2725enisa_euvd
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35706enisa_euvd
- http://osvdb.org/37852nvd
- http://secunia.com/advisories/26250Vendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan