Design/Logic Flaw

2007-10-0900:17:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.015 Low

EPSS

Percentile

86.5%

JSON

The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer’s Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be the same as CVE-2007-3698.

CPENameOperatorVersion
ucosminexus_application_server_enterpriseeq7.0.50
ucosminexus_application_server_standardeq7.0.50
ucosminexus_clienteq7.0.50
ucosminexus_developer_professionaleq7.0.50
ucosminexus_developer_standardeq7.0.50
ucosminexus_operatoreq7.0.50
ucosminexus_service_architecteq7.0.50
ucosminexus_service_platformeq7.0.50

Name	Operator	Version
ucosminexus_application_server_enterprise	eq	7.0.50
ucosminexus_application_server_standard	eq	7.0.50
ucosminexus_client	eq	7.0.50
ucosminexus_developer_professional	eq	7.0.50
ucosminexus_developer_standard	eq	7.0.50
ucosminexus_operator	eq	7.0.50
ucosminexus_service_architect	eq	7.0.50
ucosminexus_service_platform	eq	7.0.50