CVE-2007-4124: Hitachi Cosminexus Application Server

Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days.

The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.

Affected products

• Hitachi Cosminexus Application Server: version 6 only
• Hitachi Cosminexus Collaboration Portal: any version
• Hitachi Cosminexus Developer: version 6 only
• Hitachi Cosminexus ERP Integrator: any version
• Hitachi Cosminexus OPENTP1 Web Front-End Set: any version
• Hitachi Electronic Form Workflow: any version
• Hitachi Groupmax Collaboration Portal: any version
• Hitachi Ucosminexus Application Server: any version
• Hitachi Ucosminexus Collaboration Portal: any version
• Hitachi Ucosminexus Developer: any version
• Hitachi Ucosminexus ERP Integrator: any version
• Hitachi Ucosminexus OPENTP1 Web Front-End Set: any version
• Hitachi Ucosminexus Service Architect: any version
• Hitachi Ucosminexus Service Platform: any version

Published 2007-08-01. Last modified 2026-06-16.