| Package | Affected versions | Patched versions |
|---|---|---|
| cosminexus application server enterprise | = 06_50= 06_50_b= 06_50_c= 06_50_c_1= 06_50_e_1= 06_50_f= 06_51= 06_51_b_1= 06_51_c | |
| cosminexus application server standard | = 06_50= 06_50_b= 06_50_c= 06_50_c_1= 06_50_e_1= 06_50_f= 06_51= 06_51_b_1= 06_51_c | |
| electronic form workflow - standard set | = 07_00= 07_00_b | |
| electronic form workflow -professional library set | = 07_00= 07_00_b | |
| ucosminexus application server enterprise | = 06_70= 06_70_a= 06_70_b= 06_70_b_1= 06_70_d= 06_70_g= 06_71= 06_71_b= 06_71_c= 06_72_1= 06_72_b= 06_72_g= 07-00-01= 07_00= 07_00_12= 07_10= 07_10_06= 07_10_08= 07_10_1 | |
| ucosminexus application server standard | = 06_70= 06_70_a= 06_70_b= 06_70_b_1= 06_70_c= 06_70_d= 06_71= 06_71_b= 06_72_1= 06_72_b_1= 06_72_c= 06_72_d= 06_72_g= 07_00= 07_00_1= 07_10 | |
| ucosminexus service platform | = 07_00= 07_10 |
Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free