NVD

Id
56255  
Name
CVE-2007-4124  
Description
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user"s session data, and possibly gain privileges.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-08-01  
Modified Date
2011-03-07  
Seq
2007-4124  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286487 56255 CVE-2007-4124 http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html  View
286488 56255 CVE-2007-4124 25145  View
286489 56255 CVE-2007-4124 ADV-2007-2725  View
286490 56255 CVE-2007-4124 hitachi-container-session-hijacking(35706)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52441 JVNDB-2007-001133 Cosminexus の Cosminexus Component Container におけるセッション処理の不備の問題 Cosminexus の Cosminexus Component Container には、セッションフェイルオーバー機能において、セッション処理の不備により使用中のセッション情報が他のユーザのセッション情報として使用される脆弱性が存在します。 CVE-2007-4124 27479 CVE-2007-4124 56255 4.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001133.html 2007-07-06 2008-03-14 View