| Package | Affected versions | Patched versions |
|---|---|---|
| cosminexus application server enterprise | ≤ 06_51_j | |
| cosminexus application server standard | ≤ 06_51_j | |
| cosminexus developer light version 6 | ≤ 06_51_j | |
| cosminexus developer professional version 6 | ≤ 06_51_j | |
| cosminexus developer standard version 6 | ≤ 06_51_j | |
| cosminexus server | ≤ 04_01 | |
| ucosminexus application server enterprise | ≤ 07_50_01 | |
| ucosminexus application server standard | ≤ 07_50_01 | |
| ucosminexus developer light | ≤ 06_71_d | |
| ucosminexus developer professional | ≤ 07_50_01 | |
| ucosminexus developer standard | ≤ 07_50_01 | |
| ucosminexus service architect | ≤ 07_50_01 | |
| ucosminexus service platform | ≤ 07_50_01 | |
| web server | = 01_00= 01_01= 01_01_d= 01_02_d= 01_02_e= 02_00= 02_00_a= 02_02= 02_04_b= 02_06_a= 03_00= 03_00_01 |
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free