CVE-2007-4124 | BDVDB-2026-25616 Detail

Description#

The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/25145
http://www.vupen.com/english/advisories/2007/2725
https://exchange.xforce.ibmcloud.com/vulnerabilities/35706
http://osvdb.org/37852
http://secunia.com/advisories/26250
http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html

Exploit#

No public exploit known

History#

Version 12007-08-01Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.