Lucene search

[email protected]CVE-2015-5649

HistoryOct 08, 2015 - 8:59 p.m.

CVE-2015-5649

2015-10-0820:59:00

CWE-287

[email protected]

web.nvd.nist.gov

cybozu garoon

cve-2015-5649

ldap injection

authentication

security vulnerability

7 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:C/I:P/A:N

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.0%

JSON

Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended login restrictions or obtain sensitive information, by leveraging certain group-administration privileges.

Affected configurations

NVD

Node

cybozugaroonMatch3.0.0

cybozugaroonMatch3.0.1

cybozugaroonMatch3.0.2

cybozugaroonMatch3.0.3

cybozugaroonMatch3.1.0

cybozugaroonMatch3.1.1

cybozugaroonMatch3.1.2

cybozugaroonMatch3.1.3

cybozugaroonMatch3.5.0

cybozugaroonMatch3.5.1

cybozugaroonMatch3.5.2

cybozugaroonMatch3.5.3

cybozugaroonMatch3.5.4

cybozugaroonMatch3.5.5

cybozugaroonMatch3.7sp1

cybozugaroonMatch3.7sp2

cybozugaroonMatch3.7sp3

cybozugaroonMatch3.7.0

cybozugaroonMatch3.7.1

cybozugaroonMatch3.7.2

cybozugaroonMatch3.7.3

cybozugaroonMatch4.0.0

cybozugaroonMatch4.0.3

CPENameOperatorVersion
cybozu:garooncybozu garooneq3.0.0
cybozu:garooncybozu garooneq3.0.1
cybozu:garooncybozu garooneq3.0.2
cybozu:garooncybozu garooneq3.0.3
cybozu:garooncybozu garooneq3.1.0
cybozu:garooncybozu garooneq3.1.1
cybozu:garooncybozu garooneq3.1.2
cybozu:garooncybozu garooneq3.1.3
cybozu:garooncybozu garooneq3.5.0
cybozu:garooncybozu garooneq3.5.1

CPE	Name	Operator	Version
cybozu:garoon	cybozu garoon	eq	3.0.0
cybozu:garoon	cybozu garoon	eq	3.0.1
cybozu:garoon	cybozu garoon	eq	3.0.2
cybozu:garoon	cybozu garoon	eq	3.0.3
cybozu:garoon	cybozu garoon	eq	3.1.0
cybozu:garoon	cybozu garoon	eq	3.1.1
cybozu:garoon	cybozu garoon	eq	3.1.2
cybozu:garoon	cybozu garoon	eq	3.1.3
cybozu:garoon	cybozu garoon	eq	3.5.0
cybozu:garoon	cybozu garoon	eq	3.5.1

Rows per page:

1-10 of 211

References

jvn.jp/en/jp/JVN38369032/index.html

jvndb.jvn.jp/jvndb/JVNDB-2015-000152

support.cybozu.com/ja-jp/article/9176

7 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:C/I:P/A:N

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.0%

JSON

Related for CVE-2015-5649

nvd1 jvn1 prion1 cvelist1