PT-2007-5399 · Hitachi · Hitachi Groupmax Collaboration - Schedule+2

Published 2007-08-08 · Updated 2017-07-29 · CVE-2007-4204

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hitachi Groupmax Collaboration - Schedule versions 07-32 through 07-32-/B uCosminexus Collaboration Portal versions 06-32 through 06-32-/B Groupmax Collaboration Web Client - Mail/Schedule versions 07-32 through 07-32-/A

Description The issue allows schedule data to be assigned to the wrong user under unspecified conditions, potentially enabling remote authenticated users to obtain sensitive information.

Recommendations For Hitachi Groupmax Collaboration - Schedule versions 07-32 through 07-32-/B, update to a version that fixes the issue of assigning schedule data to the wrong user. For uCosminexus Collaboration Portal versions 06-32 through 06-32-/B, update to a version that fixes the issue of assigning schedule data to the wrong user. For Groupmax Collaboration Web Client - Mail/Schedule versions 07-32 through 07-32-/A, update to a version that fixes the issue of assigning schedule data to the wrong user.

Fix

Related Identifiers

CVE-2007-4204

Affected Products

Groupmax Collaboration Web Client - Mail/Schedule

Hitachi Groupmax Collaboration - Schedule

Ucosminexus Collaboration Portal

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-4204 · Security Note
• http://hitachi-support.com/security_e/vuls_e/HS07-022_e/index-e.html · Patch
• http://vupen.com/english/advisories/2007/2723 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35704 · Note
• http://osvdb.org/46987 · Note