Unscored CVE-2019-5966 EUVD-2019-15534GHSA-8gp8-q73h-h557

Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/d…

Published Jul 5, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Description

Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
SiteBridge	Joruri Mail	2.1.4 and earlier	—

References

https://joruri.org/docs/2018060400041/
https://jvn.jp/en/jp/JVN58052567/index.html