CVE-2007-5810

Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2007-11-05

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• Cosminexus Application Server Enterprise (Hitachi)
• Cosminexus Application Server Standard (Hitachi)
• Cosminexus Developer Light Version 6 (Hitachi)
• Cosminexus Developer Professional Version 6 (Hitachi)
• Cosminexus Developer Standard Version 6 (Hitachi)
• Cosminexus Server (Hitachi)
• Ucosminexus Application Server Enterprise (Hitachi)
• Ucosminexus Application Server Standard (Hitachi)
• Ucosminexus Developer Light (Hitachi)
• Ucosminexus Developer Professional (Hitachi)
• Ucosminexus Developer Standard (Hitachi)
• Ucosminexus Service Architect (Hitachi)
• Ucosminexus Service Platform (Hitachi)
• Web Server (Hitachi)

References

• http://osvdb.org/42026
• http://secunia.com/advisories/27421
• http://www.hitachi-support.com/security_e/vuls_e/HS07-034_e/index-e.html
• http://www.securityfocus.com/bid/26271
• http://www.vupen.com/english/advisories/2007/3666