Vulnerability Description
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.
Affected Platforms (CPE)
📦
Cosminexus Application Server
= 6📦
Cosminexus Application Server
= 6📦
Cosminexus Collaboration Portal
All versions📦
Cosminexus Erp Integrator
All versions📦
Cosminexus Opentp1 Web Front End Set
All versions📦
Electronic Form Workflow
All versions📦
Electronic Form Workflow
All versions📦
Electronic Form Workflow
All versions📦
Groupmax Collaboration Portal
All versions📦
Ucosminexus Application Server
All versions📦
Ucosminexus Application Server
All versions📦
Ucosminexus Collaboration Portal
All versions📦
Ucosminexus Developer
All versions📦
Ucosminexus Developer
All versions📦
Ucosminexus Developer
All versions📦
Ucosminexus Erp Integrator
All versions📦
Ucosminexus Opentp1 Web Front End Set
All versions📦
Ucosminexus Service Architect
All versions📦
Ucosminexus Service Platform
All versions