CVE-2008-6744

Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Link	Resource
http://osvdb.org/46575
http://cybozu.co.jp/products/dl/notice/detail/0016.html	Vendor Advisory
http://cybozu.co.jp/products/dl/notice/detail/0018.html	Vendor Advisory
http://secunia.com/advisories/30882	Vendor Advisory
http://jvn.jp/en/jp/JVN18405927/index.html
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000033.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/43438

Configuration 1

cpe:2.3:a:cybozu:cybozu_garoon:2.0.4:*:*:*:*:*:*:* cpe:2.3:a:cybozu:cybozu_garoon:2.0.0:*:*:*:*:*:*:* cpe:2.3:a:cybozu:cybozu_garoon:2.0.3:*:*:*:*:*:*:* cpe:2.3:a:cybozu:cybozu_garoon:2.1.0:*:*:*:*:*:*:* cpe:2.3:a:cybozu:cybozu_garoon:2.1.3:*:*:*:*:*:*:* cpe:2.3:a:cybozu:cybozu_garoon:2.1.1:*:*:*:*:*:*:* cpe:2.3:a:cybozu:cybozu_office:6:*:*:*:*:*:*:* cpe:2.3:a:cybozu:cybozu_garoon:2.0.5:*:*:*:*:*:*:* cpe:2.3:a:cybozu:cybozu_garoon:2.1.2:*:*:*:*:*:*:* cpe:2.3:a:cybozu:cybozu_garoon:2.0.6:*:*:*:*:*:*:* cpe:2.3:a:cybozu:cybozu_dezie:*:*:*:*:*:*:*:* cpe:2.3:a:cybozu:cybozu_garoon:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:cybozu:cybozu_garoon:2.0.1:*:*:*:*:*:*:*

---

Published : 2009-04-23 05:30

Updated : 2017-08-17 01:29

---

NVD link : CVE-2008-6744

Mitre link : CVE-2008-6744

Cybozu

CWE-352