CVE-2007-4124
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.
Key facts
- CVSS score
- 4.9 (v2.0)
- Severity
- MEDIUM
- CVSS vector
AV:N/AC:M/Au:S/C:P/I:P/A:N- EPSS score
- 1.0% (63th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2007-4108)
- Published
- August 1, 2007
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2007-4108 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- hitachi / cosminexus application server
- hitachi / cosminexus application server
- hitachi / cosminexus collaboration portal
- hitachi / cosminexus developer
- hitachi / cosminexus developer
- hitachi / cosminexus developer
- hitachi / cosminexus erp integrator
- hitachi / cosminexus opentp1 web front-end set
- hitachi / electronic form workflow
- hitachi / electronic form workflow
- hitachi / electronic form workflow
- hitachi / groupmax collaboration portal
- hitachi / ucosminexus application server
- hitachi / ucosminexus application server
- hitachi / ucosminexus collaboration portal
- hitachi / ucosminexus developer
- hitachi / ucosminexus developer
- hitachi / ucosminexus developer
- hitachi / ucosminexus erp integrator
- hitachi / ucosminexus opentp1 web front-end set
- hitachi / ucosminexus service architect
- hitachi / ucosminexus service platform
References
- http://osvdb.org/37852
- http://secunia.com/advisories/26250(Vendor Advisory)
- http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html(Patch, Vendor Advisory)
- http://www.securityfocus.com/bid/25145
- http://www.vupen.com/english/advisories/2007/2725
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35706
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain