PT-2007-3140 · Hitachi+1 · Hitachi Collaboration - Online Community Management+4

Publicado 2007-03-31 · Atualizado 2017-07-29 · CVE-2007-1786

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Hitachi Collaboration - Online Community Management versions 01-00 through 01-30

Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This affects products such as Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager.

Recommendations: For versions 01-00 through 01-30, update to a version that includes a fix for this issue, as using an updated version should mitigate the risk of SQL injection attacks.

Correção

Identificadores relacionados

CVE-2007-1786

Produtos afetados

Ucosminexus Collaboration Portal

Groupmax Collaboration Portal

Groupmax Collaboration Web Client

Hitachi Collaboration - Online Community Management

Ucosminexus Content Manager

Referências · 7

• http://vupen.com/english/advisories/2007/1168 · Nota
• http://secunia.com/advisories/24693 · Aviso do Fabricante
• http://hitachi-support.com/security_e/vuls_e/HS07-008_e/index-e.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-1786 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33348 · Nota
• http://osvdb.org/34544 · Nota
• http://securityfocus.com/bid/23208 · Nota