CVE:CVE-2007-4124
CNNVD:CNNVD-200708-002
Cosminexus Component Container 20070731版本之前的6, 6.7, 和7版本中的session failover函数, 当在多个Hitachi产品中运行时, 可以使用未明情况下错误用户的会话数据。这会允许远程验证用户可以获得敏感信息，纠正其它用户的会话数据，并可能获得特权。
solution:Upgrade hitachi cosminexus_application_server to a higher version than 6,and avoid the version 6; Upgrade hitachi cosminexus_collaboration_portal to a higher version than *; Upgrade hitachi cosminexus_developer to a higher version than 6,and avoid the version 6; Upgrade hitachi cosminexus_erp_integrator to a higher version than *; Upgrade hitachi cosminexus_opentp1_web_front-end_set to a higher version than *; Upgrade hitachi electronic_form_workflow to a higher version than *; Upgrade hitachi groupmax_collaboration_portal to a higher version than *; Upgrade hitachi ucosminexus_application_server to a higher version than *; Upgrade hitachi ucosminexus_collaboration_portal to a higher version than *; Upgrade hitachi ucosminexus_developer to a higher version than *; Upgrade hitachi ucosminexus_erp_integrator to a higher version than *; Upgrade hitachi ucosminexus_opentp1_web_front-end_set to a higher version than *; Upgrade hitachi ucosminexus_service_architect to a higher version than *; Upgrade hitachi ucosminexus_service_platform to a higher version than *