{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-001519.html",
  "dc:date": "2010-06-22T11:23+09:00",
  "dcterms:issued": "2010-06-22T11:23+09:00",
  "dcterms:modified": "2010-06-22T11:23+09:00",
  "description": "SSL client authentication in Hitachi Web Server has a vulnerability which allows an attacker to access a Hitachi Web Server using the client certificates registered in the Certification Revocation List (CRL).\r\nThis vulnerability does not apply if SSL or SSL client authentication is not in use. The vulnerability does affect the Cosminexus products bundled with Hitachi Web Server.",
  "link": "https://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-001519.html",
  "sec:cpe": {
    "#text": "cpe:/a:hitachi:hitachi_web_server",
    "@product": "Hitachi Web Server",
    "@vendor": "Hitachi, Ltd",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "4.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2010-001519",
  "sec:references": {
    "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
    "@id": "CWE-287",
    "@title": "Improper Authentication(CWE-287)"
  },
  "title": "Improper Authentication Vulnerability in Handling of Revoked Certificate in Hitachi Web Server SSL Client Authentication"
}