CVE-2007-4124

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-08-01 · updated 2026-06-16

Description

The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.

Affected products

Hitachi Cosminexus Application Server: 6
Hitachi Cosminexus Collaboration Portal: all versions
Hitachi Cosminexus Developer: 6
Hitachi Cosminexus Erp Integrator: all versions
Hitachi Cosminexus Opentp1 Web Front-End Set: all versions
Hitachi Electronic Form Workflow: all versions
Hitachi Groupmax Collaboration Portal: all versions
Hitachi Ucosminexus Application Server: all versions
Hitachi Ucosminexus Collaboration Portal: all versions
Hitachi Ucosminexus Developer: all versions
Hitachi Ucosminexus Erp Integrator: all versions
Hitachi Ucosminexus Opentp1 Web Front-End Set: all versions
Hitachi Ucosminexus Service Architect: all versions
Hitachi Ucosminexus Service Platform: all versions

References

Get alerted when CVE-2007-4124 or the next vulnerability affects your stack