CVE-2015-5649

Опубликовано: 08 окт. 2015

Источник: nvd

CVSS2: 7

EPSS Низкий

Описание

Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended login restrictions or obtain sensitive information, by leveraging certain group-administration privileges.

Ссылки

http://jvn.jp/en/jp/JVN38369032/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000152
Vendor Advisory
https://support.cybozu.com/ja-jp/article/9176
Vendor Advisory
http://jvn.jp/en/jp/JVN38369032/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000152
Vendor Advisory
https://support.cybozu.com/ja-jp/article/9176
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cybozu:garoon:3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.7:sp1:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.7:sp2:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.7:sp3:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00161

Низкий

7 High

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-j53g-p6p5-q44w

github

больше 3 лет назад