CVEvulnerability
CVE-2014-1984
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-04-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via unspecified vectors.
Affected configurations
• cybozu remote service manager (<= 2.3.0)
• cybozu remote service manager (>= 3.0.0 <= 3.1.0)
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://cs.cybozu.co.jp/information/20130317notice02.php Patch, Vendor Advisory
- http://jvn.jp/en/jp/JVN00058727/index.html Third Party Advisory, VDB Entry
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000040 Third Party Advisory, VDB Entry
- http://cs.cybozu.co.jp/information/20130317notice02.php Patch, Vendor Advisory
- http://jvn.jp/en/jp/JVN00058727/index.html Third Party Advisory, VDB Entry
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000040 Third Party Advisory, VDB Entry