« Volver al listado

CVE-2007-4204

Estado: ModificadaBaja (3.5)—

Hitachi Groupmax Collaboration - Schedule, as used in Groupmax Collaboration Portal 07-32 through 07-32-/B, uCosminexus Collaboration Portal 06-32 through 06-32-/B, and Groupmax Collaboration Web Client - Mail/Schedule 07-32 through 07-32-/A, can assign schedule data to the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Hitachi — Groupmax Collaboration PortalHitachi — Groupmax Collaboration WEB ClientHitachi — Ucosminexus Collaboration Portal

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-4204",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-08-08T01:17:00.000",
  "references": [
    {
      "url": "http://osvdb.org/46987",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-022_e/index-e.html",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2723",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35704",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/46987",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-022_e/index-e.html",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2723",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35704",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Hitachi Groupmax Collaboration - Schedule, as used in Groupmax Collaboration Portal 07-32 through 07-32-/B, uCosminexus Collaboration Portal 06-32 through 06-32-/B, and Groupmax Collaboration Web Client - Mail/Schedule 07-32 through 07-32-/A, can assign schedule data to the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information."
    },
    {
      "lang": "es",
      "value": "Hitachi Groupmax Collaboration - Schedule, usado en Groupmax Collaboration Portal 07-32 hasta 07-32-/B, uCosminexus Collaboration Portal 06-32 hasta 06-32-/B, y Groupmax Collaboration Web Client - Mail/Schedule 07-32 hasta 07-32-/A, puede asignar datos de programación (schedule) al usuario incorrecto bajo condiciones no especificadas, lo cual podría permitir a usuarios autenticados remotamente obtener información sensible."
    }
  ],
  "lastModified": "2026-06-16T22:43:35.597",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hitachi:groupmax_collaboration_portal:07-32:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D2D3053F-0657-4F30-8851-7F46B430BA69"
            },
            {
              "criteria": "cpe:2.3:a:hitachi:groupmax_collaboration_portal:07-32_b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E2D5034-F336-48AD-A892-31A650A7F54A"
            },
            {
              "criteria": "cpe:2.3:a:hitachi:groupmax_collaboration_web_client:07-32:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "67191ED5-9A70-4DD5-B561-D99037D44DEA"
            },
            {
              "criteria": "cpe:2.3:a:hitachi:groupmax_collaboration_web_client:07-32_a:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8202A38A-1346-4E14-B0BE-A41E46CDB451"
            },
            {
              "criteria": "cpe:2.3:a:hitachi:ucosminexus_collaboration_portal:06-32:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2963D385-1A2B-4ED5-A4C8-7C188B5972F4"
            },
            {
              "criteria": "cpe:2.3:a:hitachi:ucosminexus_collaboration_portal:06-32_b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "934777D6-1B32-46B9-A540-61690A897EBF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}