CVE-2007-5810 Auth bypass in n/a
Remote attackers can bypass authentication and spoof identities by exploiting improper SSL client certificate validation in Hitachi Web Server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-5810?
CVE-2007-5810 is a medium-severity authentication bypass vulnerability in n/a, published on 5 Nov 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.
Weakness: CWE-20
Which versions are affected by CVE-2007-5810?
It affects 14 products.
Products include Hitachi Cosminexus Application Server Enterprise, Hitachi Cosminexus Application Server Standard, Hitachi Cosminexus Developer Light Version 6, Hitachi Cosminexus Developer Professional Version 6, Hitachi Cosminexus Developer Standard Version 6, Hitachi Cosminexus Server and 8 more.
How do I fix CVE-2007-5810?
No fix has been published for CVE-2007-5810 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2007-5810 being exploited?
There is no known exploitation of CVE-2007-5810 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-cfg9-hj54-h2q5.