Lucene search
HistoryOct 08, 2015 - 8:59 p.m.
CVE-2015-5649
CVSS2
7
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:C/I:P/A:N
AI Score
6.8
Confidence
Low
EPSS
0.001
Percentile
46.9%
Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended login restrictions or obtain sensitive information, by leveraging certain group-administration privileges.
Affected configurations
Node
cybozugaroonMatch3.0.0
ORcybozugaroonMatch3.0.1
ORcybozugaroonMatch3.0.2
ORcybozugaroonMatch3.0.3
ORcybozugaroonMatch3.1.0
ORcybozugaroonMatch3.1.1
ORcybozugaroonMatch3.1.2
ORcybozugaroonMatch3.1.3
ORcybozugaroonMatch3.5.0
ORcybozugaroonMatch3.5.1
ORcybozugaroonMatch3.5.2
ORcybozugaroonMatch3.5.3
ORcybozugaroonMatch3.5.4
ORcybozugaroonMatch3.5.5
ORcybozugaroonMatch3.7sp1
ORcybozugaroonMatch3.7sp2
ORcybozugaroonMatch3.7sp3
ORcybozugaroonMatch3.7.0
ORcybozugaroonMatch3.7.1
ORcybozugaroonMatch3.7.2
ORcybozugaroonMatch3.7.3
ORcybozugaroonMatch4.0.0
ORcybozugaroonMatch4.0.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cybozu | garoon | 3.0.0 | cpe:2.3:a:cybozu:garoon:3.0.0:*:*:*:*:*:*:* |
| cybozu | garoon | 3.0.1 | cpe:2.3:a:cybozu:garoon:3.0.1:*:*:*:*:*:*:* |
| cybozu | garoon | 3.0.2 | cpe:2.3:a:cybozu:garoon:3.0.2:*:*:*:*:*:*:* |
| cybozu | garoon | 3.0.3 | cpe:2.3:a:cybozu:garoon:3.0.3:*:*:*:*:*:*:* |
| cybozu | garoon | 3.1.0 | cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:* |
| cybozu | garoon | 3.1.1 | cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:* |
| cybozu | garoon | 3.1.2 | cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:* |
| cybozu | garoon | 3.1.3 | cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:* |
| cybozu | garoon | 3.5.0 | cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:* |
| cybozu | garoon | 3.5.1 | cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2015-10-08 20:59:00
jvn
jvn
JVN#38369032: Cybozu Garoon vulnerable to LDAP injection
2015-10-07 00:00:00
cve
cve
CVE-2015-5649
2015-10-08 20:59:00
cvelist
cvelist
CVE-2015-5649
2015-10-08 20:00:00
CVSS2
7
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:C/I:P/A:N
AI Score
6.8
Confidence
Low
EPSS
0.001
Percentile
46.9%
Related for NVD:CVE-2015-5649