CVE-2007-5810: Hitachi Cosminexus Application Server Enterprise

Medium severity, CVSS 5.0. EPSS: 0.8% chance of exploitation in the next 30 days.

Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.

Affected products

  • Hitachi Cosminexus Application Server Enterprise: up to and including 06_51_j
  • Hitachi Cosminexus Application Server Standard: up to and including 06_51_j
  • Hitachi Cosminexus Developer Light Version 6: up to and including 06_51_j
  • Hitachi Cosminexus Developer Professional Version 6: up to and including 06_51_j
  • Hitachi Cosminexus Developer Standard Version 6: up to and including 06_51_j
  • Hitachi Cosminexus Server: up to and including 04_01
  • Hitachi Ucosminexus Application Server Enterprise: up to and including 07_50_01
  • Hitachi Ucosminexus Application Server Standard: up to and including 07_50_01
  • Hitachi Ucosminexus Developer Light: up to and including 06_71_d
  • Hitachi Ucosminexus Developer Professional: up to and including 07_50_01
  • Hitachi Ucosminexus Developer Standard: up to and including 07_50_01
  • Hitachi Ucosminexus Service Architect: up to and including 07_50_01
  • Hitachi Ucosminexus Service Platform: up to and including 07_50_01
  • Hitachi Web Server: version 01_00 only; version 01_01 only; version 01_01_d only; version 01_02_d only; version 01_02_e only; version 02_00 only; …

Published 2007-11-05. Last modified 2026-06-16.