A vulnerability has been reported in Cosminexus Portal Framework, which potentially can be exploited by malicious users to gain knowledge of sensitive information.

The vulnerability is caused due to an unspecified error within the <ut:cache> tag library and may cause content cached in a portlet using the affected library to be replaced by other content.

Successful exploitation may reportedly e.g. result in a user's personal information in the cache being displayed to another user.

Solution
The vendor has issued fixes. See the patch matrix at:
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.hitachi-support.com/security_e/vuls_e/HS04-006_e/index-e.html

Deep Links
Links available in Customer Area