Description
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.
References
- 42026 vdb-entry
- http://www.hitachi-support.com/security_e/vuls_e/HS07-034_e/index-e.html
- 27421 third-party-advisory
- ADV-2007-3666 vdb-entry
- 26271 vdb-entry