PT-2007-5399 · Hitachi · Hitachi Groupmax Collaboration - Schedule+2

Publicado 2007-08-08 · Atualizado 2017-07-29 · CVE-2007-4204

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hitachi Groupmax Collaboration - Schedule versions 07-32 through 07-32-/B uCosminexus Collaboration Portal versions 06-32 through 06-32-/B Groupmax Collaboration Web Client - Mail/Schedule versions 07-32 through 07-32-/A

Description The issue allows schedule data to be assigned to the wrong user under unspecified conditions, potentially enabling remote authenticated users to obtain sensitive information.

Recommendations For Hitachi Groupmax Collaboration - Schedule versions 07-32 through 07-32-/B, update to a version that fixes the issue of assigning schedule data to the wrong user. For uCosminexus Collaboration Portal versions 06-32 through 06-32-/B, update to a version that fixes the issue of assigning schedule data to the wrong user. For Groupmax Collaboration Web Client - Mail/Schedule versions 07-32 through 07-32-/A, update to a version that fixes the issue of assigning schedule data to the wrong user.

Correção

Identificadores relacionados

CVE-2007-4204

Produtos afetados

Groupmax Collaboration Web Client - Mail/Schedule

Hitachi Groupmax Collaboration - Schedule

Ucosminexus Collaboration Portal

Referências · 5

• http://vupen.com/english/advisories/2007/2723 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4204 · Nota de Segurança
• http://hitachi-support.com/security_e/vuls_e/HS07-022_e/index-e.html · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35704 · Nota
• http://osvdb.org/46987 · Nota