Lucene search
HistoryAug 28, 2007 - 1:17 a.m.
CVE-2007-4564
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user’s group permissions to logical user server processes, which allows local users to gain privileges.
Affected configurations
Node
hitachicosminexus_application_server_enterpriseMatch06_50aix
ORhitachicosminexus_application_server_enterpriseMatch06_50hpux
ORhitachicosminexus_application_server_enterpriseMatch06_50linux
ORhitachicosminexus_application_server_enterpriseMatch06_50linux_ipf
ORhitachicosminexus_application_server_enterpriseMatch06_50solaris
ORhitachicosminexus_application_server_enterpriseMatch06_50_blinux_ipf
ORhitachicosminexus_application_server_enterpriseMatch06_50_clinux
ORhitachicosminexus_application_server_enterpriseMatch06_50_c_1hpux_ipf
ORhitachicosminexus_application_server_enterpriseMatch06_50_c_1solaris
ORhitachicosminexus_application_server_enterpriseMatch06_50_e_1hpux
ORhitachicosminexus_application_server_enterpriseMatch06_50_faix
ORhitachicosminexus_application_server_enterpriseMatch06_51linux_ipf
ORhitachicosminexus_application_server_enterpriseMatch06_51_b_1linux_ipf
ORhitachicosminexus_application_server_enterpriseMatch06_51_clinux
ORhitachicosminexus_application_server_standardMatch06_50aix
ORhitachicosminexus_application_server_standardMatch06_50hpux
ORhitachicosminexus_application_server_standardMatch06_50hpux_ipf
ORhitachicosminexus_application_server_standardMatch06_50linux
ORhitachicosminexus_application_server_standardMatch06_50linux_ipf
ORhitachicosminexus_application_server_standardMatch06_50_blinux_ipf
ORhitachicosminexus_application_server_standardMatch06_50_clinux
ORhitachicosminexus_application_server_standardMatch06_50_c_1hpux_ipf
ORhitachicosminexus_application_server_standardMatch06_50_c_1solaris
ORhitachicosminexus_application_server_standardMatch06_50_e_1hpux
ORhitachicosminexus_application_server_standardMatch06_50_faix
ORhitachicosminexus_application_server_standardMatch06_51linux
ORhitachicosminexus_application_server_standardMatch06_51linux_ipf
ORhitachicosminexus_application_server_standardMatch06_51_b_1linux
ORhitachicosminexus_application_server_standardMatch06_51_clinux
ORhitachielectronic_form_workflow_-_standard_setMatch07_00linux
ORhitachielectronic_form_workflow_-_standard_setMatch07_00_blinux
ORhitachielectronic_form_workflow_-professional_library_setMatch07_00linux
ORhitachielectronic_form_workflow_-professional_library_setMatch07_00_blinux
ORhitachiucosminexus_application_server_enterpriseMatch06_70aix
ORhitachiucosminexus_application_server_enterpriseMatch06_70solaris
ORhitachiucosminexus_application_server_enterpriseMatch06_70_aaix
ORhitachiucosminexus_application_server_enterpriseMatch06_70_asolaris
ORhitachiucosminexus_application_server_enterpriseMatch06_70_baix
ORhitachiucosminexus_application_server_enterpriseMatch06_70_bhpux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch06_70_blinux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch06_70_bsolaris
ORhitachiucosminexus_application_server_enterpriseMatch06_70_b_1linux
ORhitachiucosminexus_application_server_enterpriseMatch06_70_daix
ORhitachiucosminexus_application_server_enterpriseMatch06_70_ghpux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch06_71linux
ORhitachiucosminexus_application_server_enterpriseMatch06_71_bhpux
ORhitachiucosminexus_application_server_enterpriseMatch06_71_blinux
ORhitachiucosminexus_application_server_enterpriseMatch06_71_csolaris
ORhitachiucosminexus_application_server_enterpriseMatch06_72_1hpux
ORhitachiucosminexus_application_server_enterpriseMatch06_72_blinux
ORhitachiucosminexus_application_server_enterpriseMatch06_72_blinux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch06_72_ghpux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch07-00-01linux
ORhitachiucosminexus_application_server_enterpriseMatch07_00aix
ORhitachiucosminexus_application_server_enterpriseMatch07_00hpux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch07_00linux
ORhitachiucosminexus_application_server_enterpriseMatch07_00solaris
ORhitachiucosminexus_application_server_enterpriseMatch07_00_12hpux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch07_10aix
ORhitachiucosminexus_application_server_enterpriseMatch07_10hpux
ORhitachiucosminexus_application_server_enterpriseMatch07_10hpux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch07_10linux
ORhitachiucosminexus_application_server_enterpriseMatch07_10linux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch07_10_1linux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch07_10_06linux_ipf
ORhitachiucosminexus_application_server_enterpriseMatch07_10_08hpux_ipf
ORhitachiucosminexus_application_server_standardMatch06_70solaris
ORhitachiucosminexus_application_server_standardMatch06_70_aaix
ORhitachiucosminexus_application_server_standardMatch06_70_asolaris
ORhitachiucosminexus_application_server_standardMatch06_70_baix
ORhitachiucosminexus_application_server_standardMatch06_70_bhpux
ORhitachiucosminexus_application_server_standardMatch06_70_blinux_ipf
ORhitachiucosminexus_application_server_standardMatch06_70_bsolaris
ORhitachiucosminexus_application_server_standardMatch06_70_b_1linux
ORhitachiucosminexus_application_server_standardMatch06_70_csolaris
ORhitachiucosminexus_application_server_standardMatch06_70_daix
ORhitachiucosminexus_application_server_standardMatch06_71linux
ORhitachiucosminexus_application_server_standardMatch06_71_blinux
ORhitachiucosminexus_application_server_standardMatch06_72_1hpux
ORhitachiucosminexus_application_server_standardMatch06_72_b_1linux
ORhitachiucosminexus_application_server_standardMatch06_72_csolaris
ORhitachiucosminexus_application_server_standardMatch06_72_daix
ORhitachiucosminexus_application_server_standardMatch06_72_ghpux_ipf
ORhitachiucosminexus_application_server_standardMatch07_00aix
ORhitachiucosminexus_application_server_standardMatch07_00hpux_ipf
ORhitachiucosminexus_application_server_standardMatch07_00linux
ORhitachiucosminexus_application_server_standardMatch07_00solaris
ORhitachiucosminexus_application_server_standardMatch07_00_1linux
ORhitachiucosminexus_application_server_standardMatch07_10hpux
ORhitachiucosminexus_application_server_standardMatch07_10hpux_ipf
ORhitachiucosminexus_application_server_standardMatch07_10linux
ORhitachiucosminexus_application_server_standardMatch07_10linux_ipf
ORhitachiucosminexus_service_platformMatch07_00linux
ORhitachiucosminexus_service_platformMatch07_10aix
ORhitachiucosminexus_service_platformMatch07_10linux
Related
prion
prion
Code injection
2007-08-28 01:17:00
cvelist
cvelist
CVE-2007-4564
2007-08-28 01:00:00
cve
cve
CVE-2007-4564
2007-08-28 01:17:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2007-4564