CVE-2007-4124 Business logic in n/a
Remote authenticated users can access or corrupt other users' session data, potentially gaining privileges or sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-4124?
CVE-2007-4124 is a medium-severity vulnerability in n/a, published on 1 Aug 2007. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.
Which versions are affected by CVE-2007-4124?
It affects 14 products.
Products include Hitachi Cosminexus Application Server, Hitachi Cosminexus Collaboration Portal, Hitachi Cosminexus Developer, Hitachi Cosminexus Erp Integrator, Hitachi Cosminexus Opentp1 Web Front-End Set, Hitachi Electronic Form Workflow and 8 more.
How do I fix CVE-2007-4124?
No fix has been published for CVE-2007-4124 yet. Limit exposure of the affected software until one is available.
Is CVE-2007-4124 being exploited?
There is no known exploitation of CVE-2007-4124 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-hhp6-3f6p-xrjv.