Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors.
[
{
"product": "Joruri Mail",
"vendor": "SiteBridge Inc.",
"versions": [
{
"status": "affected",
"version": "2.1.4 and earlier"
}
]
}
]