JVN#26200083: GroupSession vulnerable to open redirect

GroupSession provided by Japan Total System Co.,Ltd. is an open source groupware. GroupSession contains an open redirect vulnerability CWE-601. Impact When accessing a specially crafted page, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishi...

CVE-2017-2165

GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors...

Authentication flaw

GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors...

CVE-2017-2165

GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors...

CVE-2017-2165

CVE-2017-2165 affects GroupSession versions ≤ 4.6.4. The root cause is a failure to restrict access permissions, allowing remote authenticated attackers to bypass access controls and obtain sensitive information such as emails via unspecified vectors. Documented impact is authenticated access to ...

CVE-2017-2165: Exposure of Sensitive Information to an Unauthorized Actor

GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors...

PT-2017-15226

Name of the Vulnerable Software and Affected Versions GroupSession versions 4.6.4 and earlier Description The issue allows remote authenticated attackers to bypass access restrictions and obtain sensitive information, such as emails, via unspecified vectors. Recommendations For GroupSession...

Japan Total System GroupSession Unrestricted Access Vulnerability

Japan Total System GroupSession is a groupware project by Japan Total System JTS to facilitate communication among companies and organizations, aiming to promote information sharing. A security vulnerability exists in JTS GroupSession 4.6.4 and earlier versions, which stems from the program's...

GroupSession fails to restrict access permissions

Overview GroupSession provided by Japan Total System Co.,Ltd. is open source groupware. GroupSession fails to restrict access permissions. Norihiko Hirukawa of FiveDrive Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#42164352: GroupSession fails to restrict access permissions

GroupSession provided by Japan Total System Co.,Ltd. is open source groupware. GroupSession fails to restrict access permissions. Impact An authenticated attacker may obtain other user's senisitive information such as email. Solution Update the Software Update to the latest version according to t...