CVE-2007-4564
4.6
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 3.9 / Impact: 6.4
Source: NVD
Description
Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges.
Affected (95)
Products: Hitachi: Cosminexus Application Server Enterprise, Cosminexus Application Server Standard, Electronic Form Workflow Standard Set, Electronic Form Workflow Professional Library Set, Ucosminexus Application Server Enterprise, Ucosminexus Application Server Standard, Ucosminexus Service Platform
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 06_50 | |
| Version 06_50 | |
| Version 07_00 | |
| Version 07_00 | |
| Version 06_70 | |
| Version 06_70 | |
| Version 07_00 |
Related CWEs
References (10)
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.