Sign in Get started

← All advisories

Medium severity5.4NVD Advisory· Published Jul 7, 2017· Updated May 13, 2026

CVE-2017-2145

CVE-2017-2145

Description

Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors.

Affected products

10

Cybozu/Garoon9 versions
cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:4.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:4.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:4.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:4.2.4:*:*:*:*:*:*:*
Cybozu, Inc./Cybozu Garoonv5
Range: 4.0.0 to 4.2.4

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

jvn.jp/en/jp/JVN43534286/index.htmlnvdThird Party AdvisoryVDB Entry
support.cybozu.com/ja-jp/article/9695nvdVendor Advisory

News mentions

0

No linked articles in our index yet.