Lucene search

[email protected]CVE-2007-4204

HistoryAug 08, 2007 - 1:17 a.m.

CVE-2007-4204

2007-08-0801:17:00

[email protected]

web.nvd.nist.gov

hitachi

groupmax collaboration

schedule

data

user

security

vulnerability

cve-2007-4204

nvd

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.8%

JSON

Hitachi Groupmax Collaboration - Schedule, as used in Groupmax Collaboration Portal 07-32 through 07-32-/B, uCosminexus Collaboration Portal 06-32 through 06-32-/B, and Groupmax Collaboration Web Client - Mail/Schedule 07-32 through 07-32-/A, can assign schedule data to the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information.

Affected configurations

NVD

Node

hitachigroupmax_collaboration_portalMatch07-32

hitachigroupmax_collaboration_portalMatch07-32_b

hitachigroupmax_collaboration_web_clientMatch07-32

hitachigroupmax_collaboration_web_clientMatch07-32_a

hitachiucosminexus_collaboration_portalMatch06-32

hitachiucosminexus_collaboration_portalMatch06-32_b

CPENameOperatorVersion
hitachi:groupmax_collaboration_portalhitachi groupmax collaboration portaleq07-32
hitachi:groupmax_collaboration_portalhitachi groupmax collaboration portaleq07-32_b
hitachi:groupmax_collaboration_web_clienthitachi groupmax collaboration web clienteq07-32
hitachi:groupmax_collaboration_web_clienthitachi groupmax collaboration web clienteq07-32_a
hitachi:ucosminexus_collaboration_portalhitachi ucosminexus collaboration portaleq06-32
hitachi:ucosminexus_collaboration_portalhitachi ucosminexus collaboration portaleq06-32_b

CPE	Name	Operator	Version
hitachi:groupmax_collaboration_portal	hitachi groupmax collaboration portal	eq	07-32
hitachi:groupmax_collaboration_portal	hitachi groupmax collaboration portal	eq	07-32_b
hitachi:groupmax_collaboration_web_client	hitachi groupmax collaboration web client	eq	07-32
hitachi:groupmax_collaboration_web_client	hitachi groupmax collaboration web client	eq	07-32_a
hitachi:ucosminexus_collaboration_portal	hitachi ucosminexus collaboration portal	eq	06-32
hitachi:ucosminexus_collaboration_portal	hitachi ucosminexus collaboration portal	eq	06-32_b

References

osvdb.org/46987

www.hitachi-support.com/security_e/vuls_e/HS07-022_e/index-e.html

www.vupen.com/english/advisories/2007/2723

exchange.xforce.ibmcloud.com/vulnerabilities/35704

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.8%

JSON

Related for CVE-2007-4204

prion1 nvd1 cvelist1