Lucene search

JpcertCVE-2016-4841

HistoryApr 21, 2017 - 2:59 p.m.

CVE-2016-4841

2017-04-2114:59:00

CWE-20

jpcert

web.nvd.nist.gov

cve-2016-4841

cybozu mailwise

email headers

remote attackers

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

Confidence

High

EPSS

0.002

Percentile

59.8%

JSON

Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers.

Affected configurations

Nvd

Node

cybozumailwiseMatch5.0.0

cybozumailwiseMatch5.0.1

cybozumailwiseMatch5.0.4

cybozumailwiseMatch5.0.5

cybozumailwiseMatch5.0.6

cybozumailwiseMatch5.1.0

cybozumailwiseMatch5.1.1

cybozumailwiseMatch5.1.2

cybozumailwiseMatch5.1.4

cybozumailwiseMatch5.2.0

cybozumailwiseMatch5.2.1

cybozumailwiseMatch5.3.0

cybozumailwiseMatch5.3.1

cybozumailwiseMatch5.3.2

VendorProductVersionCPE
cybozumailwise5.0.0cpe:2.3:a:cybozu:mailwise:5.0.0:*:*:*:*:*:*:*
cybozumailwise5.0.1cpe:2.3:a:cybozu:mailwise:5.0.1:*:*:*:*:*:*:*
cybozumailwise5.0.4cpe:2.3:a:cybozu:mailwise:5.0.4:*:*:*:*:*:*:*
cybozumailwise5.0.5cpe:2.3:a:cybozu:mailwise:5.0.5:*:*:*:*:*:*:*
cybozumailwise5.0.6cpe:2.3:a:cybozu:mailwise:5.0.6:*:*:*:*:*:*:*
cybozumailwise5.1.0cpe:2.3:a:cybozu:mailwise:5.1.0:*:*:*:*:*:*:*
cybozumailwise5.1.1cpe:2.3:a:cybozu:mailwise:5.1.1:*:*:*:*:*:*:*
cybozumailwise5.1.2cpe:2.3:a:cybozu:mailwise:5.1.2:*:*:*:*:*:*:*
cybozumailwise5.1.4cpe:2.3:a:cybozu:mailwise:5.1.4:*:*:*:*:*:*:*
cybozumailwise5.2.0cpe:2.3:a:cybozu:mailwise:5.2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cybozu	mailwise	5.0.0	cpe:2.3:a:cybozu:mailwise:5.0.0:::::::*
cybozu	mailwise	5.0.1	cpe:2.3:a:cybozu:mailwise:5.0.1:::::::*
cybozu	mailwise	5.0.4	cpe:2.3:a:cybozu:mailwise:5.0.4:::::::*
cybozu	mailwise	5.0.5	cpe:2.3:a:cybozu:mailwise:5.0.5:::::::*
cybozu	mailwise	5.0.6	cpe:2.3:a:cybozu:mailwise:5.0.6:::::::*
cybozu	mailwise	5.1.0	cpe:2.3:a:cybozu:mailwise:5.1.0:::::::*
cybozu	mailwise	5.1.1	cpe:2.3:a:cybozu:mailwise:5.1.1:::::::*
cybozu	mailwise	5.1.2	cpe:2.3:a:cybozu:mailwise:5.1.2:::::::*
cybozu	mailwise	5.1.4	cpe:2.3:a:cybozu:mailwise:5.1.4:::::::*
cybozu	mailwise	5.2.0	cpe:2.3:a:cybozu:mailwise:5.2.0:::::::*

Rows per page:

1-10 of 141

References

jvn.jp/en/jp/JVN01353821/index.html

jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000135.html

www.securityfocus.com/bid/92459

support.cybozu.com/ja-jp/article/9607

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

Confidence

High

EPSS

0.002

Percentile

59.8%

JSON

Related for CVE-2016-4841