CVE-2017-2145

Опубликовано: 07 июл. 2017

Источник: nvd

CVSS3: 5.4

CVSS2: 5.8

EPSS Низкий

Описание

Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors.

Конфигурация 1

Одно из

cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:4.2.1:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:4.2.2:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:4.2.3:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:garoon:4.2.4:*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.00197

Низкий

5.4 Medium

CVSS3

5.8 Medium

CVSS2

CWE-384

GHSA-xqm5-rpmp-48hp