Lucene search
MitreCVE-2007-4563HistoryAug 28, 2007 - 1:17 a.m.
CVE-2007-4563
2007-08-2801:17:00
CWE-264
mitre
web.nvd.nist.gov
28
cve-2007-4563
cosminexus manager
application server
group permissions
security vulnerability
CVSS2
4.4
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
High
EPSS
0
Percentile
5.1%
Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user’s group permissions to logical J2EE server processes, which allows local users to gain privileges.
Affected configurations
Node
hitachicosminexus_application_server_enterpriseMatch06_50aix
ORhitachicosminexus_application_server_enterpriseMatch06_50hpux
ORhitachicosminexus_application_server_enterpriseMatch06_50linux
ORhitachicosminexus_application_server_enterpriseMatch06_50linux_ipf
ORhitachicosminexus_application_server_enterpriseMatch06_50solaris
ORhitachicosminexus_application_server_enterpriseMatch06_50_blinux_ipf
ORhitachicosminexus_application_server_enterpriseMatch06_50_clinux
ORhitachicosminexus_application_server_enterpriseMatch06_50_c_1hpux_ipf
ORhitachicosminexus_application_server_enterpriseMatch06_50_c_1solaris
ORhitachicosminexus_application_server_enterpriseMatch06_50_e_1hpux
ORhitachicosminexus_application_server_enterpriseMatch06_50_faix
ORhitachicosminexus_application_server_enterpriseMatch06_51linux_ipf
ORhitachicosminexus_application_server_enterpriseMatch06_51_b_1linux_ipf
ORhitachicosminexus_application_server_enterpriseMatch06_51_clinux
ORhitachicosminexus_application_server_standardMatch06_50aix
ORhitachicosminexus_application_server_standardMatch06_50hpux
ORhitachicosminexus_application_server_standardMatch06_50hpux_ipf
ORhitachicosminexus_application_server_standardMatch06_50linux
ORhitachicosminexus_application_server_standardMatch06_50linux_ipf
ORhitachicosminexus_application_server_standardMatch06_50_blinux_ipf
ORhitachicosminexus_application_server_standardMatch06_50_clinux
ORhitachicosminexus_application_server_standardMatch06_50_c_1hpux_ipf
ORhitachicosminexus_application_server_standardMatch06_50_c_1solaris
ORhitachicosminexus_application_server_standardMatch06_50_e_1hpux
ORhitachicosminexus_application_server_standardMatch06_50_faix
ORhitachicosminexus_application_server_standardMatch06_51linux
ORhitachicosminexus_application_server_standardMatch06_51linux_ipf
ORhitachicosminexus_application_server_standardMatch06_51_b_1linux
ORhitachicosminexus_application_server_standardMatch06_51_clinux
ORhitachielectronic_form_workflow_-_standard_setMatch07_00linux
ORhitachielectronic_form_workflow_-_standard_setMatch07_00_blinux
ORhitachielectronic_form_workflow_-professional_library_setMatch07_00linux
ORhitachielectronic_form_workflow_-professional_library_setMatch07_00_blinux
ORhitachiucosminexus_application_server_enterpriseMatch06_70aix
ORhitachiucosminexus_application_server_enterpriseMatch06_70solaris
ORhitachiucosminexus_application_server_enterpriseMatch06_70_aaix
ORhitachiucosminexus_application_server_enterpriseMatch06_70_asolaris
ORhitachiucosminexus_application_server_enterpriseMatch06_70_baix
ORhitachiucosminexus_application_server_enterpriseMatch06_70_bhpux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch06_70_blinux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch06_70_bsolaris
ORhitachiucosminexus_application_server_enterpriseMatch06_70_b_1linux
ORhitachiucosminexus_application_server_enterpriseMatch06_70_daix
ORhitachiucosminexus_application_server_enterpriseMatch06_70_ghpux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch06_71linux
ORhitachiucosminexus_application_server_enterpriseMatch06_71_bhpux
ORhitachiucosminexus_application_server_enterpriseMatch06_71_blinux
ORhitachiucosminexus_application_server_enterpriseMatch06_71_csolaris
ORhitachiucosminexus_application_server_enterpriseMatch06_72_1hpux
ORhitachiucosminexus_application_server_enterpriseMatch06_72_blinux
ORhitachiucosminexus_application_server_enterpriseMatch06_72_blinux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch06_72_ghpux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch07-00-01linux
ORhitachiucosminexus_application_server_enterpriseMatch07_00aix
ORhitachiucosminexus_application_server_enterpriseMatch07_00hpux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch07_00linux
ORhitachiucosminexus_application_server_enterpriseMatch07_00solaris
ORhitachiucosminexus_application_server_enterpriseMatch07_00_12hpux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch07_10aix
ORhitachiucosminexus_application_server_enterpriseMatch07_10hpux
ORhitachiucosminexus_application_server_enterpriseMatch07_10hpux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch07_10linux
ORhitachiucosminexus_application_server_enterpriseMatch07_10linux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch07_10_1linux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch07_10_06linux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch07_10_08hpux_ipf
ORhitachiucosminexus_application_server_standardMatch06_70solaris
ORhitachiucosminexus_application_server_standardMatch06_70_aaix
ORhitachiucosminexus_application_server_standardMatch06_70_asolaris
ORhitachiucosminexus_application_server_standardMatch06_70_baix
ORhitachiucosminexus_application_server_standardMatch06_70_bhpux
ORhitachiucosminexus_application_server_standardMatch06_70_blinux_ipf
ORhitachiucosminexus_application_server_standardMatch06_70_bsolaris
ORhitachiucosminexus_application_server_standardMatch06_70_b_1linux
ORhitachiucosminexus_application_server_standardMatch06_70_csolaris
ORhitachiucosminexus_application_server_standardMatch06_70_daix
ORhitachiucosminexus_application_server_standardMatch06_71linux
ORhitachiucosminexus_application_server_standardMatch06_71_blinux
ORhitachiucosminexus_application_server_standardMatch06_72_1hpux
ORhitachiucosminexus_application_server_standardMatch06_72_b_1linux
ORhitachiucosminexus_application_server_standardMatch06_72_csolaris
ORhitachiucosminexus_application_server_standardMatch06_72_daix
ORhitachiucosminexus_application_server_standardMatch06_72_ghpux_ipf
ORhitachiucosminexus_application_server_standardMatch07_00aix
ORhitachiucosminexus_application_server_standardMatch07_00hpux_ipf
ORhitachiucosminexus_application_server_standardMatch07_00linux
ORhitachiucosminexus_application_server_standardMatch07_00solaris
ORhitachiucosminexus_application_server_standardMatch07_00_1linux
ORhitachiucosminexus_application_server_standardMatch07_10hpux
ORhitachiucosminexus_application_server_standardMatch07_10hpux_ipf
ORhitachiucosminexus_application_server_standardMatch07_10linux
ORhitachiucosminexus_application_server_standardMatch07_10linux_ipf
ORhitachiucosminexus_service_platformMatch07_00linux
ORhitachiucosminexus_service_platformMatch07_10aix
ORhitachiucosminexus_service_platformMatch07_10linux
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hitachi | cosminexus_application_server_enterprise | 06_50 | cpe:2.3:a:hitachi:cosminexus_application_server_enterprise:06_50:*:aix:*:*:*:*:* |
| hitachi | cosminexus_application_server_enterprise | 06_50 | cpe:2.3:a:hitachi:cosminexus_application_server_enterprise:06_50:*:hpux:*:*:*:*:* |
| hitachi | cosminexus_application_server_enterprise | 06_50 | cpe:2.3:a:hitachi:cosminexus_application_server_enterprise:06_50:*:linux:*:*:*:*:* |
| hitachi | cosminexus_application_server_enterprise | 06_50 | cpe:2.3:a:hitachi:cosminexus_application_server_enterprise:06_50:*:linux_ipf:*:*:*:*:* |
| hitachi | cosminexus_application_server_enterprise | 06_50 | cpe:2.3:a:hitachi:cosminexus_application_server_enterprise:06_50:*:solaris:*:*:*:*:* |
| hitachi | cosminexus_application_server_enterprise | 06_50_b | cpe:2.3:a:hitachi:cosminexus_application_server_enterprise:06_50_b:*:linux_ipf:*:*:*:*:* |
| hitachi | cosminexus_application_server_enterprise | 06_50_c | cpe:2.3:a:hitachi:cosminexus_application_server_enterprise:06_50_c:*:linux:*:*:*:*:* |
| hitachi | cosminexus_application_server_enterprise | 06_50_c_1 | cpe:2.3:a:hitachi:cosminexus_application_server_enterprise:06_50_c_1:*:hpux_ipf:*:*:*:*:* |
| hitachi | cosminexus_application_server_enterprise | 06_50_c_1 | cpe:2.3:a:hitachi:cosminexus_application_server_enterprise:06_50_c_1:*:solaris:*:*:*:*:* |
| hitachi | cosminexus_application_server_enterprise | 06_50_e_1 | cpe:2.3:a:hitachi:cosminexus_application_server_enterprise:06_50_e_1:*:hpux:*:*:*:*:* |
Related
nvd
nvd
CVE-2007-4563
2007-08-28 01:17:00
prion
prion
Code injection
2007-08-28 01:17:00
cvelist
cvelist
CVE-2007-4563
2007-08-28 01:00:00
CVSS2
4.4
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVE-2007-4563