CVE-2017-2165

GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors.

Score

CVSS 3.0 6.5 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2017-06-09

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Groupsession (Groupsession)
• Groupsession (Japan Total System Co.ltd.)

References

• http://jvn.jp/en/jp/JVN42164352/index.html
• http://www.securityfocus.com/bid/98719