CVE-2016-1151

Опубликовано: 17 фев. 2016

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication of arbitrary users.

Ссылки

http://jvn.jp/en/jp/JVN64209269/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000024
Vendor Advisory
https://cs.cybozu.co.jp/2016/006111.html
Vendor Advisory
http://jvn.jp/en/jp/JVN64209269/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000024
Vendor Advisory
https://cs.cybozu.co.jp/2016/006111.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.00129

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-qg86-qrqg-4cxf