CVE:CVE-2007-4564
CNNVD:CNNVD-200708-423
Cosminexus Application Server 07-00 及其后期版本的Cosminexus Manager可能向逻辑用户服务器程序分配错误的用户群许可信息，这会允许本地用户获得特权。
solution:Upgrade hitachi cosminexus_application_server_enterprise to a higher version than 06_50,06_50_b,06_50_c,06_50_c_1,06_50_e_1,06_50_f,06_51,06_51_b_1,06_51_c,and avoid the version 06_50,06_50_b,06_50_c,06_50_c_1,06_50_e_1,06_50_f,06_51,06_51_b_1,06_51_c; Upgrade hitachi cosminexus_application_server_standard to a higher version than 06_50,06_50_b,06_50_c,06_50_c_1,06_50_e_1,06_50_f,06_51,06_51_b_1,06_51_c,and avoid the version 06_50,06_50_b,06_50_c,06_50_c_1,06_50_e_1,06_50_f,06_51,06_51_b_1,06_51_c; Upgrade hitachi electronic_form_workflow_-_standard_set to a higher version than 07_00,07_00_b,and avoid the version 07_00,07_00_b; Upgrade hitachi electronic_form_workflow_-professional_library_set to a higher version than 07_00,07_00_b,and avoid the version 07_00,07_00_b; Upgrade hitachi ucosminexus_application_server_enterprise to a higher version than 06_70,06_70_a,06_70_b,06_70_b_1,06_70_d,06_70_g,06_71,06_71_b,06_71_c,06_72_1,06_72_b,06_72_g,07-00-01,07_00,07_00_12,07_10,07_10_1,07_10_06,07_10_08,and avoid the version 06_70,06_70_a,06_70_b,06_70_b_1,06_70_d,06_70_g,06_71,06_71_b,06_71_c,06_72_1,06_72_b,06_72_g,07-00-01,07_00,07_00_12,07_10,07_10_1,07_10_06,07_10_08; Upgrade hitachi ucosminexus_application_server_standard to a higher version than 06_70,06_70_a,06_70_b,06_70_b_1,06_70_c,06_70_d,06_71,06_71_b,06_72_1,06_72_b_1,06_72_c,06_72_d,06_72_g,07_00,07_00_1,07_10,and avoid the version 06_70,06_70_a,06_70_b,06_70_b_1,06_70_c,06_70_d,06_71,06_71_b,06_72_1,06_72_b_1,06_72_c,06_72_d,06_72_g,07_00,07_00_1,07_10; Upgrade hitachi ucosminexus_service_platform to a higher version than 07_00,07_10,and avoid the version 07_00,07_10