Hitachi uCosminexus Portal Framework Multiple Vulnerabilities

Bugtraq ID:	34314
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Mar 31 2009 12:00AM
Updated:	Mar 31 2009 12:00AM
Credit:	The vendor
Vulnerable:	Hitachi uCosminexus Portal Framework - Light 07-60-/B (Windows) Hitachi uCosminexus Portal Framework - Light 07-60 (Windows) Hitachi uCosminexus Portal Framework - Light 07-50-/B (Windows) Hitachi uCosminexus Portal Framework - Light 07-50 (Windows) Hitachi uCosminexus Portal Framework - Light 07-11-/E (Windows) Hitachi uCosminexus Portal Framework - Light 07-11 (Windows) Hitachi uCosminexus Portal Framework - Light 07-10-/B (Windows) Hitachi uCosminexus Portal Framework - Light 07-10 (Windows) Hitachi uCosminexus Portal Framework - Light 07-01 (Windows) Hitachi uCosminexus Portal Framework - Light 07-00-/A (Windows) Hitachi uCosminexus Portal Framework - Light 07-00 (Windows) Hitachi uCosminexus Portal Framework - Light 06-30-/C (Windows) Hitachi uCosminexus Portal Framework - Light 06-30 (Windows) Hitachi uCosminexus Portal Framework - Light 06-20 (Windows) Hitachi uCosminexus Portal Framework - Light 06-11-/B (Windows) Hitachi uCosminexus Portal Framework - Light 06-11 (Windows) Hitachi uCosminexus Portal Framework 07-60-/B (Windows) Hitachi uCosminexus Portal Framework 07-60 (Windows) Hitachi uCosminexus Portal Framework 07-60 (Linux) Hitachi uCosminexus Portal Framework 07-50-/B (Windows) Hitachi uCosminexus Portal Framework 07-50 (Windows) Hitachi uCosminexus Portal Framework 07-11-/E (Windows) Hitachi uCosminexus Portal Framework 07-11 (Windows) Hitachi uCosminexus Portal Framework 07-10-/B (Windows) Hitachi uCosminexus Portal Framework 07-10 (Windows) Hitachi uCosminexus Portal Framework 07-01 (Windows) Hitachi uCosminexus Portal Framework 07-00-/A (Windows) Hitachi uCosminexus Portal Framework 07-00 (Windows) Hitachi uCosminexus Portal Framework 06-20 (Windows) Hitachi uCosminexus Portal Framework 06-11-/A (Windows) Hitachi uCosminexus Portal Framework 06-11 (Windows) Hitachi uCosminexus Content Manager 01-02 (Windows) Hitachi uCosminexus Content Manager 01-01-/A (Windows) Hitachi uCosminexus Content Manager 01-01 (Windows) Hitachi uCosminexus Content Manager 01-00-/A (Windows) Hitachi uCosminexus Content Manager 01-00 (Windows) Hitachi uCosminexus Collaboration Portal - Forum/File Sharing 06-52 (Windows) Hitachi uCosminexus Collaboration Portal - Forum/File Sharing 06-50-/E (Windows) Hitachi uCosminexus Collaboration Portal - Forum/File Sharing 06-50 (Windows) Hitachi uCosminexus Collaboration Portal - Forum/File Sharing 06-36-/B (Windows) Hitachi uCosminexus Collaboration Portal - Forum/File Sharing 06-36 (Windows) Hitachi uCosminexus Collaboration Portal - Forum/File Sharing 06-35-/B (Windows) Hitachi uCosminexus Collaboration Portal - Forum/File Sharing 06-35 (Windows) Hitachi uCosminexus Collaboration Portal - Forum/File Sharing 06-32-/C (Windows) Hitachi uCosminexus Collaboration Portal - Forum/File Sharing 06-32 (Windows) Hitachi uCosminexus Collaboration Portal - Forum/File Sharing 06-30-/E (Windows) Hitachi uCosminexus Collaboration Portal - Forum/File Sharing 06-30 (Windows) Hitachi uCosminexus Collaboration Portal - Forum/File Sharing 06-20-/E (Windows) Hitachi uCosminexus Collaboration Portal - Forum/File Sharing 06-20 (Windows) Hitachi uCosminexus Collaboration Portal 06-52 (Windows) Hitachi uCosminexus Collaboration Portal 06-51-/D (Windows) Hitachi uCosminexus Collaboration Portal 06-51 (Windows) Hitachi uCosminexus Collaboration Portal 06-50-/F (Windows) Hitachi uCosminexus Collaboration Portal 06-50 (Windows) Hitachi uCosminexus Collaboration Portal 06-36-/D (Windows) Hitachi uCosminexus Collaboration Portal 06-36 (Windows) Hitachi uCosminexus Collaboration Portal 06-35-/C (Windows) Hitachi uCosminexus Collaboration Portal 06-35 (Windows) Hitachi uCosminexus Collaboration Portal 06-32-/F (Windows) Hitachi uCosminexus Collaboration Portal 06-32 (Windows) Hitachi uCosminexus Collaboration Portal 06-30-/G (Windows) Hitachi uCosminexus Collaboration Portal 06-30 (Windows) Hitachi uCosminexus Collaboration Portal 06-20-/F (Windows) Hitachi uCosminexus Collaboration Portal 06-20 (Windows) Hitachi JP1/Integrated Management - Service Support 08-51 (Windows) Hitachi JP1/Integrated Management - Service Support 08-51 Hitachi JP1/Integrated Management - Service Support 08-11-03 (Windows) Hitachi JP1/Integrated Management - Service Support 08-11-03 Hitachi JP1/Integrated Management - Service Support 08-11-02 Hitachi JP1/Integrated Management - Service Support 08-11-01 Hitachi JP1/Integrated Management - Service Support 08-11 (Windows) Hitachi JP1/Integrated Management - Service Support 08-11 Hitachi JP1/Integrated Management - Service Support 08-10-05 (Windows) Hitachi JP1/Integrated Management - Service Support 08-10-05 Hitachi JP1/Integrated Management - Service Support 08-10-04 Hitachi JP1/Integrated Management - Service Support 08-10-03 Hitachi JP1/Integrated Management - Service Support 08-10-02 Hitachi JP1/Integrated Management - Service Support 08-10-01 Hitachi JP1/Integrated Management - Service Support 08-10 (Windows) Hitachi JP1/Integrated Management - Service Support 08-10 Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-52 (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-51-/B (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-51 (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-50-/C (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-50 (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-36-/C (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-36 (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-35-/A (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-35 (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-32-/E (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-32 (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-30-/G (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-30 (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-20-/C (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-20 (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-52 (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-50-/E (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-50 (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-36-/B (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-36 (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-35-/B (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-35 (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-32-/C (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-32 (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-30-/E (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-30 (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-20-/E (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-20 (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-10-/C (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-10 (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-00-/A (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-00 (Windows) Hitachi Groupmax Collaboration Portal 07-51-/D (Windows) Hitachi Groupmax Collaboration Portal 07-51 (Windows) Hitachi Groupmax Collaboration Portal 07-50-/F (Windows) Hitachi Groupmax Collaboration Portal 07-50 (Windows) Hitachi Groupmax Collaboration Portal 07-36-/D (Windows) Hitachi Groupmax Collaboration Portal 07-36 (Windows) Hitachi Groupmax Collaboration Portal 07-35-/C (Windows) Hitachi Groupmax Collaboration Portal 07-35 (Windows) Hitachi Groupmax Collaboration Portal 07-32-/F (Windows) Hitachi Groupmax Collaboration Portal 07-32 (Windows) Hitachi Groupmax Collaboration Portal 07-30-/G (Windows) Hitachi Groupmax Collaboration Portal 07-30 (Windows) Hitachi Groupmax Collaboration Portal 07-20-/F (Windows) Hitachi Groupmax Collaboration Portal 07-20 (Windows) Hitachi Groupmax Collaboration Portal 07-10-/D (Windows) Hitachi Groupmax Collaboration Portal 07-10 (Windows) Hitachi Groupmax Collaboration Portal 07-00-/A (Windows) Hitachi Groupmax Collaboration Portal 07-00 (Windows) Hitachi Electronic Form Workflow Set 07-60-/D (Windows) Hitachi Electronic Form Workflow Set 07-60 (Windows) Hitachi Electronic Form Workflow Developer Set 07-60-/D (Windows) Hitachi Electronic Form Workflow Developer Set 07-60 (Windows) Hitachi Cosminexus Portal Framework - Light 06-10-/B (Windows) Hitachi Cosminexus Portal Framework - Light 06-10 (Windows) Hitachi Cosminexus Portal Framework - Light 06-01 (Windows) Hitachi Cosminexus Portal Framework - Light 06-00-/C (Windows) Hitachi Cosminexus Portal Framework - Light 06-00 (Windows) Hitachi Cosminexus Portal Framework - Light 02-00-/A (Windows) Hitachi Cosminexus Portal Framework - Light 02-00 (Windows) Hitachi Cosminexus Portal Framework 06-10-/C (Windows) Hitachi Cosminexus Portal Framework 06-10 (Windows) Hitachi Cosminexus Portal Framework 06-00-/C (Windows) Hitachi Cosminexus Portal Framework 06-00 (Windows) Hitachi Cosminexus Portal Framework 06-00 (Linux) Hitachi Cosminexus Portal Framework 06-00 (AIX) Hitachi Cosminexus Portal Framework 02-03-/D (Windows) Hitachi Cosminexus Portal Framework 02-03 (Windows) Hitachi Cosminexus Portal Framework 02-02-/A (HP-UX) Hitachi Cosminexus Portal Framework 02-02 (Windows) Hitachi Cosminexus Portal Framework 02-02 (HP-UX) Hitachi Cosminexus Portal Framework 02-02 (AIX) Hitachi Cosminexus Portal Framework 02-00-/B (Windows) Hitachi Cosminexus Portal Framework 02-00 (Windows) Hitachi Cosminexus Portal Framework 02-00 (HP-UX) Hitachi Cosminexus Portal Framework 02-00 (AIX) Hitachi Cosminexus Portal Framework 01-02-/B (AIX) Hitachi Cosminexus Portal Framework 01-02-/A (Windows) Hitachi Cosminexus Portal Framework 01-02 (Windows) Hitachi Cosminexus Portal Framework 01-02 (AIX) Hitachi Cosminexus Portal Framework 01-01 (Windows) Hitachi Cosminexus Portal Framework 01-00-/A (Windows) Hitachi Cosminexus Portal Framework 01-00-/A (HP-UX) Hitachi Cosminexus Portal Framework 01-00 (Windows) Hitachi Cosminexus Portal Framework 01-00 (Solaris) Hitachi Cosminexus Portal Framework 01-00 (HP-UX) Hitachi Cosminexus Portal Framework 01-00 (AIX) Hitachi Cosminexus Collaboration Portal - Forum/File Sharing 06-10-/C (Windows) Hitachi Cosminexus Collaboration Portal - Forum/File Sharing 06-10 (Windows) Hitachi Cosminexus Collaboration Portal - Forum/File Sharing 06-00-/A (Windows) Hitachi Cosminexus Collaboration Portal - Forum/File Sharing 06-00 (Windows) Hitachi Cosminexus Collaboration Portal 06-10-/D (Windows) Hitachi Cosminexus Collaboration Portal 06-10 (Windows) Hitachi Cosminexus Collaboration Portal 06-00-/A (Windows) Hitachi Cosminexus Collaboration Portal 06-00 (Windows)
Not Vulnerable:	Hitachi uCosminexus Portal Framework - Light 07-60-/C (Windows) Hitachi uCosminexus Portal Framework - Light 07-50-/C (Windows) Hitachi uCosminexus Portal Framework - Light 07-11-/F (Windows) Hitachi uCosminexus Portal Framework - Light 06-30-/D (Windows) Hitachi uCosminexus Portal Framework 07-60-/C (Windows) Hitachi uCosminexus Portal Framework 07-60-/A (Linux) Hitachi uCosminexus Portal Framework 07-50-/C (Windows) Hitachi uCosminexus Portal Framework 07-11-/F (Windows) Hitachi uCosminexus Content Manager 01-02-/A (Windows) Hitachi uCosminexus Collaboration Portal - Forum/File Sharing 06-52-/A (Windows) Hitachi uCosminexus Collaboration Portal - Forum/File Sharing 06-50-/F (Windows) Hitachi uCosminexus Collaboration Portal - Forum/File Sharing 06-36-/C (Windows) Hitachi uCosminexus Collaboration Portal 06-52-/A (Windows) Hitachi uCosminexus Collaboration Portal 06-51-/E (Windows) Hitachi uCosminexus Collaboration Portal 06-50-/G (Windows) Hitachi uCosminexus Collaboration Portal 06-36-/E (Windows) Hitachi JP1/Integrated Management - Service Support 08-51-01 (Windows) Hitachi JP1/Integrated Management - Service Support 08-50-04 (Windows) Hitachi JP1/Integrated Management - Service Support 08-50-04 Hitachi JP1/Integrated Management - Service Support 08-11-04 (Windows) Hitachi JP1/Integrated Management - Service Support 08-11-04 Hitachi JP1/Integrated Management - Service Support 08-10-06 (Windows) Hitachi JP1/Integrated Management - Service Support 08-10-06 Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-52-/A (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-51-/C (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-50-/D (Windows) Hitachi Groupmax Collaboration Web Client - Mail/Schedule 07-36-/D (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-52-/A (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-50-/F (Windows) Hitachi Groupmax Collaboration Web Client - Forum/File Sharing 07-36-/C (Windows) Hitachi Groupmax Collaboration Portal 07-52-/A (Windows) Hitachi Groupmax Collaboration Portal 07-51-/E (Windows) Hitachi Groupmax Collaboration Portal 07-50-/G (Windows) Hitachi Groupmax Collaboration Portal 07-36-/E (Windows) Hitachi Electronic Form Workflow Set 07-60-/E (Windows) Hitachi Electronic Form Workflow Developer Set 07-60-/E (Windows)

Hitachi uCosminexus Portal Framework Multiple Vulnerabilities

Hitachi uCosminexus Portal Framework is prone to an information-disclosure vulnerability, an impersonation vulnerability, and a data-integrity vulnerability.

Attackers may exploit these vulnerabilities to obtain sensitive information or to modify application data. Other attacks are also possible.

All the following are vulnerable:

uCosminexus Portal Framework
uCosminexus Portal Framework - Light
uCosminexus Portal Framework Entry Set
Groupmax Collaboration Portal
Groupmax Collaboration Web Client - Forum/File Sharing
Groupmax Collaboration Web Client - Mail/Schedule
Cosminexus Collaboration Portal
uCosminexus Collaboration Portal
Cosminexus Collaboration Portal - Forum/File Sharing
uCosminexus Collaboration Portal - Forum/File Sharing
uCosminexus Content Manager
JP1/Integrated Management - Service Support
Electronic Form Workflow Set
Electronic Form Workflow Developer Set

Hitachi uCosminexus Portal Framework Multiple Vulnerabilities

To exploit some of these issues, an attacker may be able to use a browser or common networking tools.

Hitachi uCosminexus Portal Framework Multiple Vulnerabilities

Solution:
The vendor has released an advisory and updates. Please see the references for details.

Hitachi uCosminexus Portal Framework Multiple Vulnerabilities

References:

• Hitachi Homepage (Hitachi)
  
• Multiple Vulnerabilities in uCosminexus Portal Framework (Hitachi)