CVEvulnerability
CVE-2014-0817
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-02-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 does not properly manage sessions, which allows remote authenticated users to impersonate arbitrary users via unspecified vectors.
Affected configurations
• cybozu garoon 2.0
• cybozu garoon 2.0.0
• cybozu garoon 2.0.1
• cybozu garoon 2.0.2
• cybozu garoon 2.0.3
• cybozu garoon 2.0.4
• cybozu garoon 2.0.5
• cybozu garoon 2.0.6
• cybozu garoon 2.1
• cybozu garoon 2.1.0
• cybozu garoon 2.1.1
• cybozu garoon 2.1.2
• cybozu garoon 2.1.3
• cybozu garoon 2.5
• cybozu garoon 2.5.0
• cybozu garoon 2.5.1
• cybozu garoon 2.5.2
• cybozu garoon 2.5.3
• cybozu garoon 2.5.4
• cybozu garoon 3.0
• cybozu garoon 3.1
• cybozu garoon 3.5
• cybozu garoon 3.5.3
• cybozu garoon 3.7
Related
Weakness · not in database (1)
References
- http://cs.cybozu.co.jp/information/gr20140225up03.php Vendor Advisory
- http://jvn.jp/en/jp/JVN24035499/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000021 jvndb.jvn.jp
- https://support.cybozu.com/ja-jp/article/7992 Patch, Vendor Advisory
- http://cs.cybozu.co.jp/information/gr20140225up03.php Vendor Advisory
- http://jvn.jp/en/jp/JVN24035499/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000021 jvndb.jvn.jp
- https://support.cybozu.com/ja-jp/article/7992 Patch, Vendor Advisory