Description
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.
Affected Platforms
Hitachi Cosminexus Application Server StandardHitachi Ucosminexus Developer StandardHitachi Ucosminexus Service PlatformHitachi Ucosminexus Application Server StandardHitachi Ucosminexus Developer LightHitachi Cosminexus Developer Professional Version 6Hitachi Cosminexus Application Server EnterpriseHitachi Ucosminexus Application Server EnterpriseHitachi Web ServerHitachi Cosminexus Developer Light Version 6