HS07-006: uCosminexus Component Container Unauthorized Session Information Access Vulnerability

Key Information Vulnerability ID HS07-006 Vulnerability Description During the use of session information, it may be exploited by unauthorized requests. Affected products include a series of uCosminexus Component Container products. This could lead to unauthorized access to information during request processing, due to the illegal use of session information from other requests. Note that this illegal use is temporary in nature. Affected Products uCosminexus Application Server Enterprise - Windows: 07-00 to 07-00-01, 07-10, 07-20 - Linux: 07-00 to 07-00-01, 07-10 - Linux(IPF): 07-10 - AIX: 07-00, 07-10 - HP-UX: 07-10 - HP-UX(IPF): 07-00, 07-10 - Solaris: 07-00 Other products such as uCosminexus Service Platform, uCosminexus Developer Standard, uCosminexus Developer Professional, uCosminexus Service Architect, etc., are also affected, with version ranges similar to the Enterprise versions. Fixed Products Cosminexus Component Container - Windows: - 07-10-04 (released on February 15, 2007) - 07-00-11 (released on February 7, 2007) - Linux: - 07-10-04 (released on February 15, 2007) - 07-00-11 (released on February 15, 2007) - Other platforms such as Linux(IPF), HP-UX, AIX, Solaris, etc., also have specific fixed versions and release dates. Revision History April 6, 2007: Updated information on fixed Cosminexus Component Container products. March 30, 2007: Page initially published.

Goal Reached Thanks to every supporter — we hit 100%!

HS07-006: uCosminexus Component Container Unauthorized Session Information Access Vulnerability