Vulnerability description
Multiple vulnerabilities were found in the component products uCosminexus Portal Framework and uCosminexus Portal Framework - Light, and the following products, which contain the above component products:
- uCosminexus Portal Framework Entry Set
- Groupmax Collaboration Portal
- Groupmax Collaboration Web Client - Forum/File Sharing
- Groupmax Collaboration Web Client - Mail/Schedule
- Cosminexus Collaboration Portal
- uCosminexus Collaboration Portal
- Cosminexus Collaboration Portal - Forum/File Sharing
- uCosminexus Collaboration Portal - Forum/File Sharing
- uCosminexus Content Manager
- JP1/Integrated Management - Service Support
- Electronic Form Workflow Set
- Electronic Form Workflow Developer Set
Malicious remote users can exploit this vulnerability in order to leak information, impersonate other users, and illegally update data.
Affected products and versions are listed below. Please upgrade to the fixed version.
Fixed products
The information is organized under the following headings:
(Example)
Product name: Gives the name of the fixed product.
Version:
- Platform
- Gives the fixed version, and release date.
Scheduled version(s):
- Platform
- Gives the fixed version scheduled to be released.
Product name: uCosminexus Portal Framework
Version(s):
- Windows
- 07-11-/F November 27, 2008
- 07-50-/C November 19, 2008
- 07-60-/C October 28, 2008
- Linux
- 07-60-/A December 16, 2008
Product name: uCosminexus Portal Framework - Light
Version(s):
- Windows
- 06-30-/D January 9, 2009
- 07-11-/F November 27, 2008
- 07-50-/C November 19, 2008
- 07-60-/C October 28, 2008
Product name: Groupmax Collaboration Portal
Version(s):
- Windows
- 07-36-/E January 9, 2009
- 07-50-/G December 9, 2008
- 07-51-/E December 9, 2008
- 07-52-/A December 1, 2008
Product name: Groupmax Collaboration Web Client - Forum/File Sharing
Version(s):
- Windows
- 07-36-/C January 9, 2009
- 07-50-/F December 9, 2008
- 07-52-/A December 1, 2008
Product name: Groupmax Collaboration Web Client - Mail/Schedule
Version(s):
- Windows
- 07-36-/D January 9, 2009
- 07-50-/D December 9, 2008
- 07-51-/C December 9, 2008
- 07-52-/A December 1, 2008
Product name: uCosminexus Collaboration Portal
Version(s):
- Windows
- 06-36-/E January 9, 2009
- 06-50-/G December 9, 2008
- 06-51-/E December 9, 2008
- 06-52-/A December 1, 2008
Product name: uCosminexus Collaboration Portal - Forum/File Sharing
Version(s):
- Windows
- 06-36-/C January 9, 2009
- 06-50-/F December 9, 2008
- 06-52-/A December 1, 2008
Product name: uCosminexus Content Manager
Version(s):
- Windows
- 01-02-/A December 9, 2008
Product name: JP1/Integrated Management - Service Support
Version(s):
- Windows
- 08-10-06 December 10, 2008
- 08-11-04 December 10, 2008
- 08-50-04 December 10, 2008
- 08-51-01 December 12, 2008
Product name: Electronic Form Workflow Set
Version(s):
- Windows
- 07-60-/E November 7, 2008
Product name: Electronic Form Workflow Developer Set
Version(s):
- Windows
- 07-60-/E November 7, 2008
For details on the fixed products, contact your Hitachi support service representative.