Lucene search

JpcertCVE-2016-4842

HistoryApr 20, 2017 - 6:59 p.m.

CVE-2016-4842

2017-04-2018:59:00

CWE-200

jpcert

web.nvd.nist.gov

cybozu mailwise

email security

remote attackers

information disclosure

nvd

cve-2016-4842

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

4.7

Confidence

High

EPSS

0.002

Percentile

55.6%

JSON

Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read.

Affected configurations

Nvd

Node

cybozumailwiseMatch5.0.0

cybozumailwiseMatch5.0.1

cybozumailwiseMatch5.0.4

cybozumailwiseMatch5.0.5

cybozumailwiseMatch5.0.6

cybozumailwiseMatch5.1.0

cybozumailwiseMatch5.1.1

cybozumailwiseMatch5.1.2

cybozumailwiseMatch5.1.4

cybozumailwiseMatch5.2.0

cybozumailwiseMatch5.2.1

cybozumailwiseMatch5.3.0

cybozumailwiseMatch5.3.1

cybozumailwiseMatch5.3.2

VendorProductVersionCPE
cybozumailwise5.0.0cpe:2.3:a:cybozu:mailwise:5.0.0:*:*:*:*:*:*:*
cybozumailwise5.0.1cpe:2.3:a:cybozu:mailwise:5.0.1:*:*:*:*:*:*:*
cybozumailwise5.0.4cpe:2.3:a:cybozu:mailwise:5.0.4:*:*:*:*:*:*:*
cybozumailwise5.0.5cpe:2.3:a:cybozu:mailwise:5.0.5:*:*:*:*:*:*:*
cybozumailwise5.0.6cpe:2.3:a:cybozu:mailwise:5.0.6:*:*:*:*:*:*:*
cybozumailwise5.1.0cpe:2.3:a:cybozu:mailwise:5.1.0:*:*:*:*:*:*:*
cybozumailwise5.1.1cpe:2.3:a:cybozu:mailwise:5.1.1:*:*:*:*:*:*:*
cybozumailwise5.1.2cpe:2.3:a:cybozu:mailwise:5.1.2:*:*:*:*:*:*:*
cybozumailwise5.1.4cpe:2.3:a:cybozu:mailwise:5.1.4:*:*:*:*:*:*:*
cybozumailwise5.2.0cpe:2.3:a:cybozu:mailwise:5.2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cybozu	mailwise	5.0.0	cpe:2.3:a:cybozu:mailwise:5.0.0:::::::*
cybozu	mailwise	5.0.1	cpe:2.3:a:cybozu:mailwise:5.0.1:::::::*
cybozu	mailwise	5.0.4	cpe:2.3:a:cybozu:mailwise:5.0.4:::::::*
cybozu	mailwise	5.0.5	cpe:2.3:a:cybozu:mailwise:5.0.5:::::::*
cybozu	mailwise	5.0.6	cpe:2.3:a:cybozu:mailwise:5.0.6:::::::*
cybozu	mailwise	5.1.0	cpe:2.3:a:cybozu:mailwise:5.1.0:::::::*
cybozu	mailwise	5.1.1	cpe:2.3:a:cybozu:mailwise:5.1.1:::::::*
cybozu	mailwise	5.1.2	cpe:2.3:a:cybozu:mailwise:5.1.2:::::::*
cybozu	mailwise	5.1.4	cpe:2.3:a:cybozu:mailwise:5.1.4:::::::*
cybozu	mailwise	5.2.0	cpe:2.3:a:cybozu:mailwise:5.2.0:::::::*

Rows per page:

1-10 of 141

References

jvn.jp/en/jp/JVN02576342/index.html

jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000136.html

www.securityfocus.com/bid/92460

support.cybozu.com/ja-jp/article/9606

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

4.7

Confidence

High

EPSS

0.002

Percentile

55.6%

JSON

Related for CVE-2016-4842