CVE-2007-4563
published 2007-08-28CVE-2007-4563: Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which…
PriorityP415medium4.4CVSS 2.0
AVLACMAuNCPIPAP
EPSS
0.28%
20.3th percentile
Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.
Affected
59 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hitachi | cosminexus_application_server_enterprise | — | — |
| hitachi | cosminexus_application_server_enterprise | — | — |
| hitachi | cosminexus_application_server_enterprise | — | — |
| hitachi | cosminexus_application_server_enterprise | — | — |
| hitachi | cosminexus_application_server_enterprise | — | — |
| hitachi | cosminexus_application_server_enterprise | — | — |
| hitachi | cosminexus_application_server_enterprise | — | — |
| hitachi | cosminexus_application_server_enterprise | — | — |
| hitachi | cosminexus_application_server_enterprise | — | — |
| hitachi | cosminexus_application_server_standard | — | — |
| hitachi | cosminexus_application_server_standard | — | — |
| hitachi | cosminexus_application_server_standard | — | — |
| hitachi | cosminexus_application_server_standard | — | — |
| hitachi | cosminexus_application_server_standard | — | — |
| hitachi | cosminexus_application_server_standard | — | — |
| hitachi | cosminexus_application_server_standard | — | — |
| hitachi | cosminexus_application_server_standard | — | — |
| hitachi | cosminexus_application_server_standard | — | — |
| hitachi | electronic_form_workflow_professional_library_set | — | — |
| hitachi | electronic_form_workflow_professional_library_set | — | — |
| hitachi | electronic_form_workflow_standard_set | — | — |
| hitachi | electronic_form_workflow_standard_set | — | — |
| hitachi | ucosminexus_application_server_enterprise | — | — |
| hitachi | ucosminexus_application_server_enterprise | — | — |
| hitachi | ucosminexus_application_server_enterprise | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/37854http://secunia.com/advisories/26589http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.htmlhttp://www.securityfocus.com/bid/25434https://exchange.xforce.ibmcloud.com/vulnerabilities/36245http://osvdb.org/37854http://secunia.com/advisories/26589http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.htmlhttp://www.securityfocus.com/bid/25434https://exchange.xforce.ibmcloud.com/vulnerabilities/36245
2007-08-28
Published