Description
Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges.
References
- http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html
- 25434 vdb-entry
- 37855 vdb-entry
- 26589 third-party-advisory
- cosminexus-group-security-bypass(36245) vdb-entry