CVE-2007-5810 Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a....
MediumCVSS 5.0
EPSS 0.78%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Hitachi cosminexus application server enterprise | <= 06_51_j | No fix listed |
| Hitachi cosminexus application server standard | <= 06_51_j | No fix listed |
| Hitachi cosminexus developer light version 6 | <= 06_51_j | No fix listed |
| Hitachi cosminexus developer professional version 6 | <= 06_51_j | No fix listed |
| Hitachi cosminexus developer standard version 6 | <= 06_51_j | No fix listed |
| Hitachi cosminexus server | <= 04_01 | No fix listed |
| Hitachi ucosminexus application server enterprise | <= 07_50_01 | No fix listed |
| Hitachi ucosminexus application server standard | <= 07_50_01 | No fix listed |
| Hitachi ucosminexus developer light | <= 06_71_d | No fix listed |
| Hitachi ucosminexus developer professional | <= 07_50_01 | No fix listed |
| Hitachi ucosminexus developer standard | <= 07_50_01 | No fix listed |
| Hitachi ucosminexus service architect | <= 07_50_01 | No fix listed |
| Hitachi ucosminexus service platform | <= 07_50_01 | No fix listed |
| Hitachi web server | = 01_00 | No fix listed |
| Hitachi web server | = 01_01 | No fix listed |
| Hitachi web server | = 01_01_d | No fix listed |
| Hitachi web server | = 01_02_d | No fix listed |
| Hitachi web server | = 01_02_e | No fix listed |
| Hitachi web server | = 02_00 | No fix listed |
| Hitachi web server | = 02_00_a | No fix listed |
| Hitachi web server | = 02_02 | No fix listed |
| Hitachi web server | = 02_04_b | No fix listed |
| Hitachi web server | = 02_06_a | No fix listed |
| Hitachi web server | = 03_00 | No fix listed |
| Hitachi web server | = 03_00_01 | No fix listed |
References
- 42026 vdb-entry
- 27421 patch third-party-advisory vendor-advisory
- www.hitachi-support.com patch
- 26271 vdb-entry
- ADV-2007-3666 vdb-entry