Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2007-4124 | First vendor Publication | 2007-08-01 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:S/C:P/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 4.9 | Attack Range | Network |
| Cvss Impact Score | 4.9 | Attack Complexity | Medium |
| Cvss Expoit Score | 6.8 | Authentication | Requires single instance |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4124 |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 2 | |
| Application | 1 | |
| Application | 3 | |
| Application | 1 | |
| Application | 1 | |
| Application | 3 | |
| Application | 1 | |
| Application | 2 | |
| Application | 1 | |
| Application | 3 | |
| Application | 1 | |
| Application | 1 | |
| Application | 1 | |
| Application | 1 |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 37852 | Hitachi Multiple Products Cosminexus Component Container Session Data Handli... uCosminexus Application Server contains an unspecified flaw that may allow a user to use the session data of another user. It is possible that the flaw may allow remote authenticated users to access or modify another user's data resulting in a loss of integrity. |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:16:39 |
|
| 2024-11-28 12:13:06 |
|
| 2021-05-04 12:06:12 |
|
| 2021-04-22 01:06:45 |
|
| 2020-05-23 00:20:13 |
|
| 2017-07-29 12:02:26 |
|
| 2016-06-28 16:47:49 |
|
| 2016-04-26 16:26:35 |
|
| 2013-05-11 10:33:20 |
|
