Information disclosure

2019-07-0514:15:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.3%

JSON

Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors.

CPENameOperatorVersion
joruri_maille2.1.4

CPE	Name	Operator	Version
	joruri_mail	le	2.1.4

References

joruri.org/docs/2018060400041/

jvn.jp/en/jp/JVN58052567/index.html