:A weakness has been reported in Cosminexus Application Server, which can potentially allow a server process to perform actions with escalated privileges.The problem is that the group permissions of another user can be granted to the server process when a logical J2EE server or a logical user server is started from Cosminexus Manager.Solution:Update to the latest versions (please see vendor advisory for details).Provided and/or discovered by:Reported by the vendor.Original Advisory:http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html

Original post by pooja