PT-2009-5488 · Hitachi · Hitachi Scheduler Server Set+3

Published 2009-09-11 · Updated 2009-09-24 · CVE-2009-3172

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hitachi Groupmax Groupware Server versions 07-00 through 07-50-/A Hitachi Groupmax Server Set versions 03-00 through 06-52 Hitachi Groupware Server Set versions 03-00 through 06-52 Hitachi Scheduler Server Set versions 03-00 through 06-52

Description The issue is related to unspecified vulnerability with unknown impact and attack vectors, involving invalid access rights.

Recommendations For Hitachi Groupmax Groupware Server versions 07-00 through 07-50-/A, update to a version that addresses the invalid access rights issue. For Hitachi Groupmax Server Set versions 03-00 through 06-52, update to a version that addresses the invalid access rights issue. For Hitachi Groupware Server Set versions 03-00 through 06-52, update to a version that addresses the invalid access rights issue. For Hitachi Scheduler Server Set versions 03-00 through 06-52, update to a version that addresses the invalid access rights issue.

Fix

Related Identifiers

CVE-2009-3172

Affected Products

Hitachi Groupmax Groupware Server

Hitachi Groupmax Server Set

Hitachi Groupware Server Set

Hitachi Scheduler Server Set

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2009-3172 · Security Note
• http://vupen.com/english/advisories/2009/2480 · Vendor Advisory
• http://secunia.com/advisories/36527 · Vendor Advisory
• http://hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-012/index.html · Vendor Advisory
• http://osvdb.org/57565 · Note
• http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001930.html · Note
• http://securityfocus.com/bid/36184 · Note