PT-2007-3140 · Hitachi+1 · Hitachi Collaboration - Online Community Management+4

Published 2007-03-31 · Updated 2017-07-29 · CVE-2007-1786

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Hitachi Collaboration - Online Community Management versions 01-00 through 01-30

Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This affects products such as Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager.

Recommendations: For versions 01-00 through 01-30, update to a version that includes a fix for this issue, as using an updated version should mitigate the risk of SQL injection attacks.

Fix

Related Identifiers

CVE-2007-1786

Affected Products

Ucosminexus Collaboration Portal

Groupmax Collaboration Portal

Groupmax Collaboration Web Client

Hitachi Collaboration - Online Community Management

Ucosminexus Content Manager

References · 7

• http://secunia.com/advisories/24693 · Vendor Advisory
• http://hitachi-support.com/security_e/vuls_e/HS07-008_e/index-e.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1786 · Security Note
• http://vupen.com/english/advisories/2007/1168 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33348 · Note
• http://osvdb.org/34544 · Note
• http://securityfocus.com/bid/23208 · Note