CVE-2007-4124
Estado: ModificadaMedia (4.9)—
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N
- Puntuación base: 4.9
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.01%
- Percentil entre todas las CVEs puntuadas: 62
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (14)
Hitachi — Cosminexus Application ServerHitachi — Cosminexus Collaboration PortalHitachi — Cosminexus DeveloperHitachi — Cosminexus ERP IntegratorHitachi — Cosminexus Opentp1 WEB Front-end SETHitachi — Electronic Form WorkflowHitachi — Groupmax Collaboration PortalHitachi — Ucosminexus Application ServerHitachi — Ucosminexus Collaboration PortalHitachi — Ucosminexus DeveloperHitachi — Ucosminexus ERP IntegratorHitachi — Ucosminexus Opentp1 WEB Front-end SETHitachi — Ucosminexus Service ArchitectHitachi — Ucosminexus Service Platform
CWE
- NVD-CWE-Other
Referencias
- http://osvdb.org/37852
- http://secunia.com/advisories/26250
- http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html
- http://www.securityfocus.com/bid/25145
- http://www.vupen.com/english/advisories/2007/2725
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35706
- http://osvdb.org/37852
- http://secunia.com/advisories/26250
- http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html
- http://www.securityfocus.com/bid/25145
- http://www.vupen.com/english/advisories/2007/2725
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35706
JSON original (NVD)
Mostrar
{
"id": "CVE-2007-4124",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.9,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 4.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2007-08-01T16:17:00.000",
"references": [
{
"url": "http://osvdb.org/37852",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/26250",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/25145",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2007/2725",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35706",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/37852",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/26250",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/25145",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2007/2725",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35706",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges."
},
{
"lang": "es",
"value": "La función de recuperación de sesión ante fallos en Cosminexus Component Container de Cosminexus 6, 6.7, y 7 anterior al 31/07/2007, como el usado en múltiples productos de Hitachi, puede utilizar información de la sesión para el usuario equivocado bajo ciertas condiciones no especificadas, lo cual podría permitir a usuarios autenticados remotos obtener información sensible, corromper la información de sesión de otros usuarios, y posiblemente obtener privilegios."
}
],
"lastModified": "2026-06-16T22:43:26.700",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:6:*:enterprise:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "336AC0E8-01DB-4D75-8F9F-E1673BE7883A"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:6:*:standard:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2306ACE-7FC7-4B52-AAE8-436A606C5041"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_collaboration_portal:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA4E08A2-D531-4DE2-B449-48B8AA11F365"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:6:*:light:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44328F8D-C3B7-45CD-B01D-69328275C5A7"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:6:*:professional:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43EFBD4E-DC14-4142-8128-B4261431E8FF"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:6:*:standard:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A7BE1FF-7B19-4F3F-B02D-2AA27B38F088"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_erp_integrator:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84DD23A3-EC26-4805-BCCC-9F6B1EED60D7"
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_opentp1_web_front-end_set:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CACCCE63-723C-449B-9661-FCE9FA94DD65"
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow:*:*:developer_client_set:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "945C66CA-31DB-408D-BD4B-D023381F5DF0"
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow:*:*:professional_library_set:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "424670C5-82C6-44E0-A3C0-4391F254E6BE"
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow:*:*:standard_set:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "182C9BBE-DA39-412C-868A-CCDE7E4399CF"
},
{
"criteria": "cpe:2.3:a:hitachi:groupmax_collaboration_portal:*:*:server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A8F4CE3-0710-4F68-B8C3-31B5F4E13BA8"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:*:*:enterprise:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F374179A-7C0D-48B2-B0FF-39F5D4A7E37B"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:*:*:standard:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "272AD10C-E135-4EEE-8F48-E28CF5F7B3D2"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_collaboration_portal:*:*:server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "271FC231-03E1-4C99-B9F3-A8536503B71B"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:*:*:light:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E2D80C1-773F-4C43-B990-2575782E619C"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:*:*:professional:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03011EFF-6C5F-40F2-BF6D-FE4DE0E6F552"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:*:*:standard:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "415BE30B-0222-4C2F-9791-273469DB5BED"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_erp_integrator:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C963599-5B39-40A0-A834-E738164B3531"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_opentp1_web_front-end_set:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C564AA10-5286-4986-A580-61EC7A746352"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_architect:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "354BD4CE-7B1A-4442-9F87-08CD70D9499E"
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72E63548-3AB3-4B78-AA2D-5B2AC7E06DD7"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}