CVE-2016-4907

{"id": "CVE-2016-4907", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2017-06-09T16:29:00.250", "references": [{"url": "http://www.securityfocus.com/bid/94965", "tags": ["Third Party Advisory", "VDB Entry"], "source": "vultures@jpcert.or.jp"}, {"url": "https://jvn.jp/en/jp/JVN13218253/index.html", "tags": ["Third Party Advisory", "VDB Entry"], "source": "vultures@jpcert.or.jp"}, {"url": "https://support.cybozu.com/ja-jp/article/9441", "tags": ["Vendor Advisory"], "source": "vultures@jpcert.or.jp"}, {"url": "http://www.securityfocus.com/bid/94965", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://jvn.jp/en/jp/JVN13218253/index.html", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.cybozu.com/ja-jp/article/9441", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors."}, {"lang": "es", "value": "Cybozu Garoon versiones 3.0.0 hasta 4.2.2, permite a los atacantes remotos obtener tokens CSRF por medio de vectores no especificados."}], "lastModified": "2025-04-20T01:37:25.860", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cybozu:garoon:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3BB615D-E485-4ADE-B77D-FA9FB676DA4D"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "18C7B082-06A5-4AC8-91D4-C6E2835AB286"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CAF17D9A-4A2D-4F15-B377-AC6F6B2896AB"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "13F08BE5-2639-4581-A49C-854820B25763"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56525E34-BC26-4833-938F-F157B77D82CF"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5195BBDF-2153-4600-8308-110BE2A73816"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "921FEEAD-1C44-4E65-8912-102A31B3D0B2"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A70AA82-947D-49AC-9019-A1F06DF8ABBA"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F462AD2C-EF50-489D-99E0-EAA9D78D7D46"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A69FAED9-AC11-4D20-885B-FFA04995F1F9"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3D36285-4AEF-4EE8-8737-10E3B89D3F1C"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB7D6AFF-BA89-4CCB-8F29-75592E3BA8FA"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F181B9E-3613-42D4-92FA-3AA54BB10785"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2014154-4685-4A48-AA69-02D0C1C78ED2"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B681C16-60F7-46B5-BD26-25F7DC9F5F47"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19694FDB-184D-4C09-BD72-BB7B96F6391D"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD33E00A-5082-42F4-81F5-4647BD602D31"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B130F88-71DE-4FBF-B5DF-DD8173F03151"}, {"criteria": "cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F9B321F-6CDC-426B-AE62-090E067F3533"}, {"criteria": "cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71CC4428-0CB4-497F-8274-52E6CC273D65"}, {"criteria": "cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"}, {"criteria": "cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"}, {"criteria": "cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"}, {"criteria": "cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A9EABAA-964A-4242-939A-378B03A1F150"}, {"criteria": "cpe:2.3:a:cybozu:garoon:4.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9487784-3EF9-4B11-A831-5F3D35BC716E"}, {"criteria": "cpe:2.3:a:cybozu:garoon:4.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B03D1A99-E1D3-4400-856C-62F2961E41FE"}], "operator": "OR"}]}], "sourceIdentifier": "vultures@jpcert.or.jp"}