Lucene search

K
jvnJapan Vulnerability NotesJVN:52248864
HistoryJul 29, 2015 - 12:00 a.m.

JVN#52248864: yoyaku_v41 vulnerable to authentication bypass

2015-07-2900:00:00
Japan Vulnerability Notes
jvn.jp
15

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

50.2%

yoyaku_v41 provided by Webservice-DIC is a software to manage conference room reservations. yoyaku_v41 contains an authentication bypass vulnerability (CWE-592).

Impact

A remote attacker could bypass yoyaku_v41’s authentication, and make an unintentional reservation.

Solution

Do not use yoyaku_v41
yoyaku_v41 is no longer being developed or maintained. It is recommended to stop using yoyaku_v41.

Products Affected

  • yoyaku_v41

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

50.2%

Related for JVN:52248864