CVE-2007-4564

Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2007-08-28

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Cosminexus Application Server Enterprise (Hitachi)
• Cosminexus Application Server Standard (Hitachi)
• Electronic Form Workflow - Standard Set (Hitachi)
• Electronic Form Workflow -professional Library Set (Hitachi)
• Ucosminexus Application Server Enterprise (Hitachi)
• Ucosminexus Application Server Standard (Hitachi)
• Ucosminexus Service Platform (Hitachi)

References

• http://osvdb.org/37855
• http://secunia.com/advisories/26589
• http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html
• http://www.securityfocus.com/bid/25434
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36245