CVE-2016-4843

CVE-2016-4843 affects Cybozu Mailwise prior to 5.4.0. The issue is an information-disclosure vulnerability: an unauthenticated remote attacker could obtain sensitive cookie/session information due to exposure on the CGI environment variables display page. Impact is partial confidentiality loss of...