Unscored severity · published Aug 28, 2007
CVE-2007-4563
Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to…
–
CVSS
0.3%
EPSS
No
On KEV
Description
Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Cosminexus Application Server Enterprise · Hitachi
06_50; 06_50; 06_50; 06_50; 06_50; 06_50_b; +8 more · source: NVD
CA
Cosminexus Application Server Standard · Hitachi
06_50; 06_50; 06_50; 06_50; 06_50; 06_50_b; +9 more · source: NVD
EF
Electronic Form Workflow - Standard Set · Hitachi
07_00; 07_00_b · source: NVD
EF
Electronic Form Workflow -professional Library Set · Hitachi
07_00; 07_00_b · source: NVD
UA
Ucosminexus Application Server Enterprise · Hitachi
06_70; 06_70; 06_70_a; 06_70_a; 06_70_b; 06_70_b; +27 more · source: NVD
UA
Ucosminexus Application Server Standard · Hitachi
06_70; 06_70_a; 06_70_a; 06_70_b; 06_70_b; 06_70_b; +20 more · source: NVD
US
Ucosminexus Service Platform · Hitachi
07_00; 07_10; 07_10 · source: NVD
Affected product
CA
Cosminexus Application Server Enterprise
Hitachi
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4563
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4563
osvdb.org
http://osvdb.org/37854
Patch
http://secunia.com/advisories/26589
Patch
http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html
Patch
http://www.securityfocus.com/bid/25434
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/36245
More from Cosminexus Application Server Enterprise
–
CVE-2007-5809
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script…
–
CVE-2007-5810
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof…
–
CVE-2007-4564
Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to…