CVE Vulnerabilities

CVE-2013-6004

Published: Dec 05, 2013 | Modified: Jan 03, 2014
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Session fixation vulnerability in Cybozu Garoon before 3.7.2 allows remote attackers to hijack web sessions via unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Garoon Cybozu * 3.7 (including)
Garoon Cybozu 2.0-sp1 (including) 2.0-sp1 (including)
Garoon Cybozu 2.0-sp2 (including) 2.0-sp2 (including)
Garoon Cybozu 2.0-sp3 (including) 2.0-sp3 (including)
Garoon Cybozu 2.0-sp4 (including) 2.0-sp4 (including)
Garoon Cybozu 2.0-sp5 (including) 2.0-sp5 (including)
Garoon Cybozu 2.0-sp6 (including) 2.0-sp6 (including)
Garoon Cybozu 2.1 (including) 2.1 (including)
Garoon Cybozu 2.1-sp1 (including) 2.1-sp1 (including)
Garoon Cybozu 2.1-sp2 (including) 2.1-sp2 (including)
Garoon Cybozu 2.1-sp3 (including) 2.1-sp3 (including)
Garoon Cybozu 2.5 (including) 2.5 (including)
Garoon Cybozu 2.5-sp1 (including) 2.5-sp1 (including)
Garoon Cybozu 2.5-sp2 (including) 2.5-sp2 (including)
Garoon Cybozu 2.5-sp3 (including) 2.5-sp3 (including)
Garoon Cybozu 2.5-sp4 (including) 2.5-sp4 (including)
Garoon Cybozu 3.0 (including) 3.0 (including)
Garoon Cybozu 3.0-sp1 (including) 3.0-sp1 (including)
Garoon Cybozu 3.0-sp2 (including) 3.0-sp2 (including)
Garoon Cybozu 3.0-sp3 (including) 3.0-sp3 (including)
Garoon Cybozu 3.1 (including) 3.1 (including)
Garoon Cybozu 3.1-sp1 (including) 3.1-sp1 (including)
Garoon Cybozu 3.1-sp2 (including) 3.1-sp2 (including)
Garoon Cybozu 3.1-sp3 (including) 3.1-sp3 (including)
Garoon Cybozu 3.5 (including) 3.5 (including)
Garoon Cybozu 3.5-sp1 (including) 3.5-sp1 (including)
Garoon Cybozu 3.5-sp2 (including) 3.5-sp2 (including)
Garoon Cybozu 3.5-sp3 (including) 3.5-sp3 (including)
Garoon Cybozu 3.5-sp4 (including) 3.5-sp4 (including)
Garoon Cybozu 3.5-sp5 (including) 3.5-sp5 (including)
Garoon Cybozu 3.7 (including) 3.7 (including)

References