Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-4563

Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.

Published

2007-08-28T01:17:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.4 (MEDIUM)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Access Vector: LOCAL
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

3.4

Impact Score

6.4

Weaknesses

Type: Primary
CWE-264

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	hitachi	cosminexus_application_server_enterprise	06_50	Yes
Application	hitachi	cosminexus_application_server_enterprise	06_50	Yes
Application	hitachi	cosminexus_application_server_enterprise	06_50	Yes
Application	hitachi	cosminexus_application_server_enterprise	06_50	Yes
Application	hitachi	cosminexus_application_server_enterprise	06_50	Yes
Application	hitachi	cosminexus_application_server_enterprise	06_50_b	Yes
Application	hitachi	cosminexus_application_server_enterprise	06_50_c	Yes
Application	hitachi	cosminexus_application_server_enterprise	06_50_c_1	Yes
Application	hitachi	cosminexus_application_server_enterprise	06_50_c_1	Yes
Application	hitachi	cosminexus_application_server_enterprise	06_50_e_1	Yes
Application	hitachi	cosminexus_application_server_enterprise	06_50_f	Yes
Application	hitachi	cosminexus_application_server_enterprise	06_51	Yes
Application	hitachi	cosminexus_application_server_enterprise	06_51_b_1	Yes
Application	hitachi	cosminexus_application_server_enterprise	06_51_c	Yes
Application	hitachi	cosminexus_application_server_standard	06_50	Yes
Application	hitachi	cosminexus_application_server_standard	06_50	Yes
Application	hitachi	cosminexus_application_server_standard	06_50	Yes
Application	hitachi	cosminexus_application_server_standard	06_50	Yes
Application	hitachi	cosminexus_application_server_standard	06_50	Yes
Application	hitachi	cosminexus_application_server_standard	06_50_b	Yes
Application	hitachi	cosminexus_application_server_standard	06_50_c	Yes
Application	hitachi	cosminexus_application_server_standard	06_50_c_1	Yes
Application	hitachi	cosminexus_application_server_standard	06_50_c_1	Yes
Application	hitachi	cosminexus_application_server_standard	06_50_e_1	Yes
Application	hitachi	cosminexus_application_server_standard	06_50_f	Yes
Application	hitachi	cosminexus_application_server_standard	06_51	Yes
Application	hitachi	cosminexus_application_server_standard	06_51	Yes
Application	hitachi	cosminexus_application_server_standard	06_51_b_1	Yes
Application	hitachi	cosminexus_application_server_standard	06_51_c	Yes
Application	hitachi	electronic_form_workflow_-_standard_set	07_00	Yes
Application	hitachi	electronic_form_workflow_-_standard_set	07_00_b	Yes
Application	hitachi	electronic_form_workflow_-professional_library_set	07_00	Yes
Application	hitachi	electronic_form_workflow_-professional_library_set	07_00_b	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_70	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_70	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_70_a	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_70_a	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_70_b	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_70_b	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_70_b	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_70_b	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_70_b_1	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_70_d	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_70_g	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_71	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_71_b	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_71_b	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_71_c	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_72_1	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_72_b	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_72_b	Yes
Application	hitachi	ucosminexus_application_server_enterprise	06_72_g	Yes
Application	hitachi	ucosminexus_application_server_enterprise	07-00-01	Yes
Application	hitachi	ucosminexus_application_server_enterprise	07_00	Yes
Application	hitachi	ucosminexus_application_server_enterprise	07_00	Yes
Application	hitachi	ucosminexus_application_server_enterprise	07_00	Yes
Application	hitachi	ucosminexus_application_server_enterprise	07_00	Yes
Application	hitachi	ucosminexus_application_server_enterprise	07_00_12	Yes
Application	hitachi	ucosminexus_application_server_enterprise	07_10	Yes
Application	hitachi	ucosminexus_application_server_enterprise	07_10	Yes
Application	hitachi	ucosminexus_application_server_enterprise	07_10	Yes
Application	hitachi	ucosminexus_application_server_enterprise	07_10	Yes
Application	hitachi	ucosminexus_application_server_enterprise	07_10	Yes
Application	hitachi	ucosminexus_application_server_enterprise	07_10_1	Yes
Application	hitachi	ucosminexus_application_server_enterprise	07_10_06	Yes
Application	hitachi	ucosminexus_application_server_enterprise	07_10_08	Yes
Application	hitachi	ucosminexus_application_server_standard	06_70	Yes
Application	hitachi	ucosminexus_application_server_standard	06_70_a	Yes
Application	hitachi	ucosminexus_application_server_standard	06_70_a	Yes
Application	hitachi	ucosminexus_application_server_standard	06_70_b	Yes
Application	hitachi	ucosminexus_application_server_standard	06_70_b	Yes
Application	hitachi	ucosminexus_application_server_standard	06_70_b	Yes
Application	hitachi	ucosminexus_application_server_standard	06_70_b	Yes
Application	hitachi	ucosminexus_application_server_standard	06_70_b_1	Yes
Application	hitachi	ucosminexus_application_server_standard	06_70_c	Yes
Application	hitachi	ucosminexus_application_server_standard	06_70_d	Yes
Application	hitachi	ucosminexus_application_server_standard	06_71	Yes
Application	hitachi	ucosminexus_application_server_standard	06_71_b	Yes
Application	hitachi	ucosminexus_application_server_standard	06_72_1	Yes
Application	hitachi	ucosminexus_application_server_standard	06_72_b_1	Yes
Application	hitachi	ucosminexus_application_server_standard	06_72_c	Yes
Application	hitachi	ucosminexus_application_server_standard	06_72_d	Yes
Application	hitachi	ucosminexus_application_server_standard	06_72_g	Yes
Application	hitachi	ucosminexus_application_server_standard	07_00	Yes
Application	hitachi	ucosminexus_application_server_standard	07_00	Yes
Application	hitachi	ucosminexus_application_server_standard	07_00	Yes
Application	hitachi	ucosminexus_application_server_standard	07_00	Yes
Application	hitachi	ucosminexus_application_server_standard	07_00_1	Yes
Application	hitachi	ucosminexus_application_server_standard	07_10	Yes
Application	hitachi	ucosminexus_application_server_standard	07_10	Yes
Application	hitachi	ucosminexus_application_server_standard	07_10	Yes
Application	hitachi	ucosminexus_application_server_standard	07_10	Yes
Application	hitachi	ucosminexus_service_platform	07_00	Yes
Application	hitachi	ucosminexus_service_platform	07_10	Yes
Application	hitachi	ucosminexus_service_platform	07_10	Yes

References

http://osvdb.org/37854 ([email protected])
http://secunia.com/advisories/26589 Patch, Vendor Advisory ([email protected])
http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html Patch ([email protected])
http://www.securityfocus.com/bid/25434 Patch ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/36245 ([email protected])
http://osvdb.org/37854 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/26589 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/25434 Patch (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/36245 (af854a3a-2127-422b-91ae-364da2661108)