← Database

CVE-2007-4124

MEDIUM CVSS: 4.9 Published: 2007-08-01 Modified: 2026-06-16

Description

The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.

Affected Platforms

Hitachi Ucosminexus DeveloperHitachi Electronic Form WorkflowHitachi Ucosminexus Collaboration PortalHitachi Cosminexus DeveloperHitachi Cosminexus Collaboration PortalHitachi Ucosminexus Erp IntegratorHitachi Ucosminexus Service PlatformHitachi Cosminexus Erp IntegratorHitachi Ucosminexus Application ServerHitachi Cosminexus Opentp1 Web Front-End Set

Weakness Type

NVD-CWE-Other

References