CVE:CVE-2007-5810
CNNVD:CNNVD-200711-059
Hitachi Web Server 01-00 至 03-00-01版本, 当在某些Cosminexus产品中使用时, 没有适当地校验SSL客户端证书信息,这会允许远程攻击者借助一个假签名信息的客户端证书，骗取权限。
solution:Upgrade hitachi cosminexus_application_server_enterprise to a higher version than 06_51_j,and avoid the version (,06_51_j]; Upgrade hitachi cosminexus_application_server_standard to a higher version than 06_51_j,and avoid the version (,06_51_j]; Upgrade hitachi cosminexus_developer_light_version_6 to a higher version than 06_51_j,and avoid the version (,06_51_j]; Upgrade hitachi cosminexus_developer_professional_version_6 to a higher version than 06_51_j,and avoid the version (,06_51_j]; Upgrade hitachi cosminexus_developer_standard_version_6 to a higher version than 06_51_j,and avoid the version (,06_51_j]; Upgrade hitachi cosminexus_server to a higher version than 04_01,and avoid the version (,04_01]; Upgrade hitachi ucosminexus_application_server_enterprise to a higher version than 07_50_01,and avoid the version (,07_50_01]; Upgrade hitachi ucosminexus_application_server_standard to a higher version than 07_50_01,and avoid the version (,07_50_01]; Upgrade hitachi ucosminexus_developer_light to a higher version than 06_71_d,and avoid the version (,06_71_d]; Upgrade hitachi ucosminexus_developer_professional to a higher version than 07_50_01,and avoid the version (,07_50_01]; Upgrade hitachi ucosminexus_developer_standard to a higher version than 07_50_01,and avoid the version (,07_50_01]; Upgrade hitachi ucosminexus_service_architect to a higher version than 07_50_01,and avoid the version (,07_50_01]; Upgrade hitachi ucosminexus_service_platform to a higher version than 07_50_01,and avoid the version (,07_50_01]; Upgrade hitachi web_server to a higher version than 01_00,01_01,01_01_d,01_02_d,01_02_e,02_00,02_00_a,02_02,02_04_b,02_06_a,03_00,03_00_01,and avoid the version 01_00,01_01,01_01_d,01_02_d,01_02_e,02_00,02_00_a,02_02,02_04_b,02_06_a,03_00,03_00_01