CVE-2009-3172 Missing authorization in n/a

High 7.5 Published 11 Sep 2009 Updated 16 Sep 2024

Unspecified vulnerability in Hitachi Groupmax Groupware Server allows invalid access rights, with unknown impact and attack vectors.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Not stated
Victim action needed: Not stated
Fix: None listed

What is CVE-2009-3172?

CVE-2009-3172 is a high-severity missing authorization vulnerability in n/a, published on 11 Sep 2009.

Official description

Unspecified vulnerability in Hitachi Groupmax Groupware Server 07-00 through 07-50-/A, Groupmax Server Set 03-00 through 06-52, Groupware Server Set 03-00 through 06-52, and Scheduler Server Set 03-00 through 06-52 has unknown impact and attack vectors related to invalid access rights.

Which versions are affected by CVE-2009-3172?

It affects 3 products.

Products include Hitachi Groupmax Groupware Server, Hitachi Groupmax Scheduler Server Set, Hitachi Groupmax Server Set.

How do I fix CVE-2009-3172?

No fix has been published for CVE-2009-3172 yet. Limit exposure of the affected software until one is available.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2009-3172 being exploited?

There is no known exploitation of CVE-2009-3172 in the wild and no public exploit code.

CVE-2007-4123 Information disclosure in n/a Medium 5.0

Sources

Also known as GHSA-xjxh-vgjc-x974.