CVE-2014-0817

2014-02-27T01:55:00
ID CVE-2014-0817
Type cve
Reporter cve@mitre.org
Modified 2014-02-27T17:08:00

Description

Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 does not properly manage sessions, which allows remote authenticated users to impersonate arbitrary users via unspecified vectors.