Lucene search

[email protected]CVE-2016-1195

HistoryJun 19, 2016 - 3:59 p.m.

CVE-2016-1195

2016-06-1915:59:01

[email protected]

web.nvd.nist.gov

cve-2016-1195

cybozu garoon

open redirect

vulnerability

remote attackers

phishing

crafted url

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.9%

JSON

Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.

Affected configurations

NVD

Node

cybozugaroonMatch3.0.0

cybozugaroonMatch3.0.1

cybozugaroonMatch3.0.2

cybozugaroonMatch3.0.3

cybozugaroonMatch3.1.0

cybozugaroonMatch3.1.1

cybozugaroonMatch3.1.2

cybozugaroonMatch3.1.3

cybozugaroonMatch3.5.0

cybozugaroonMatch3.5.1

cybozugaroonMatch3.5.2

cybozugaroonMatch3.5.3

cybozugaroonMatch3.5.4

cybozugaroonMatch3.5.5

cybozugaroonMatch3.7.0

cybozugaroonMatch3.7.1

cybozugaroonMatch3.7.2

cybozugaroonMatch3.7.3

cybozugaroonMatch3.7.4

cybozugaroonMatch3.7.5

cybozugaroonMatch4.0.0

cybozugaroonMatch4.0.1

cybozugaroonMatch4.0.2

cybozugaroonMatch4.0.3

cybozugaroonMatch4.2.0

CPENameOperatorVersion
cybozu:garooncybozu garooneq3.0.0
cybozu:garooncybozu garooneq3.0.1
cybozu:garooncybozu garooneq3.0.2
cybozu:garooncybozu garooneq3.0.3
cybozu:garooncybozu garooneq3.1.0
cybozu:garooncybozu garooneq3.1.1
cybozu:garooncybozu garooneq3.1.2
cybozu:garooncybozu garooneq3.1.3
cybozu:garooncybozu garooneq3.5.0
cybozu:garooncybozu garooneq3.5.1

CPE	Name	Operator	Version
cybozu:garoon	cybozu garoon	eq	3.0.0
cybozu:garoon	cybozu garoon	eq	3.0.1
cybozu:garoon	cybozu garoon	eq	3.0.2
cybozu:garoon	cybozu garoon	eq	3.0.3
cybozu:garoon	cybozu garoon	eq	3.1.0
cybozu:garoon	cybozu garoon	eq	3.1.1
cybozu:garoon	cybozu garoon	eq	3.1.2
cybozu:garoon	cybozu garoon	eq	3.1.3
cybozu:garoon	cybozu garoon	eq	3.5.0
cybozu:garoon	cybozu garoon	eq	3.5.1

Rows per page:

1-10 of 251

References

jvn.jp/en/jp/JVN32218514/index.html

jvndb.jvn.jp/jvndb/JVNDB-2016-000081

support.cybozu.com/ja-jp/article/8987

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.9%

JSON

Related for CVE-2016-1195

prion1 jvn1 cvelist1 nvd1 openvas1