4.9

CVE-2014-0817

Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 does not properly manage sessions, which allows remote authenticated users to impersonate arbitrary users via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
CybozuGaroon Version2.0 Updatesp1
CybozuGaroon Version2.0 Updatesp2
CybozuGaroon Version2.0 Updatesp3
CybozuGaroon Version2.0 Updatesp4
CybozuGaroon Version2.0 Updatesp5
CybozuGaroon Version2.0 Updatesp6
CybozuGaroon Version2.0.0
CybozuGaroon Version2.0.1
CybozuGaroon Version2.0.2
CybozuGaroon Version2.0.3
CybozuGaroon Version2.0.4
CybozuGaroon Version2.0.5
CybozuGaroon Version2.0.6
CybozuGaroon Version2.1
CybozuGaroon Version2.1 Updatesp1
CybozuGaroon Version2.1 Updatesp2
CybozuGaroon Version2.1 Updatesp3
CybozuGaroon Version2.1.0
CybozuGaroon Version2.1.1
CybozuGaroon Version2.1.2
CybozuGaroon Version2.1.3
CybozuGaroon Version2.5
CybozuGaroon Version2.5 Updatesp1
CybozuGaroon Version2.5 Updatesp2
CybozuGaroon Version2.5 Updatesp3
CybozuGaroon Version2.5 Updatesp4
CybozuGaroon Version2.5.0
CybozuGaroon Version2.5.1
CybozuGaroon Version2.5.2
CybozuGaroon Version2.5.3
CybozuGaroon Version2.5.4
CybozuGaroon Version3.0
CybozuGaroon Version3.0 Updatesp1
CybozuGaroon Version3.0 Updatesp2
CybozuGaroon Version3.0 Updatesp3
CybozuGaroon Version3.1
CybozuGaroon Version3.1 Updatesp1
CybozuGaroon Version3.1 Updatesp2
CybozuGaroon Version3.1 Updatesp3
CybozuGaroon Version3.5
CybozuGaroon Version3.5 Updatesp1
CybozuGaroon Version3.5 Updatesp2
CybozuGaroon Version3.5 Updatesp3
CybozuGaroon Version3.5 Updatesp4
CybozuGaroon Version3.5 Updatesp5
CybozuGaroon Version3.5.3
CybozuGaroon Version3.7
CybozuGaroon Version3.7 Updatesp1
CybozuGaroon Version3.7 Updatesp2
CybozuGaroon Version3.7 Updatesp3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.414
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.9 6.8 4.9
AV:N/AC:M/Au:S/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.