CVE-2013-6004: Medium severity cybozu garoon vulnerability
Published Dec 5, 2013
·Updated
Session fixation vulnerability in Cybozu Garoon before 3.7.2 allows remote attackers to hijack web sessions via unspecified vectors.
Affected Software
31 affected components
Cybozu Garoon<=3.7
Cybozu Garoon=2.0-sp1
Cybozu Garoon=2.0-sp2
Cybozu Garoon=2.0-sp3
Cybozu Garoon=2.0-sp4
Cybozu Garoon=2.0-sp5
Cybozu Garoon=2.0-sp6
Cybozu Garoon=2.1
Cybozu Garoon=2.1-sp1
Cybozu Garoon=2.1-sp2
Cybozu Garoon=2.1-sp3
Cybozu Garoon=2.5
Cybozu Garoon=2.5-sp1
Cybozu Garoon=2.5-sp2
Cybozu Garoon=2.5-sp3
Cybozu Garoon=2.5-sp4
Cybozu Garoon=3.0
Cybozu Garoon=3.0-sp1
Cybozu Garoon=3.0-sp2
Cybozu Garoon=3.0-sp3
Cybozu Garoon=3.1
Cybozu Garoon=3.1-sp1
Cybozu Garoon=3.1-sp2
Cybozu Garoon=3.1-sp3
Cybozu Garoon=3.5
Cybozu Garoon=3.5-sp1
Cybozu Garoon=3.5-sp2
Cybozu Garoon=3.5-sp3
Cybozu Garoon=3.5-sp4
Cybozu Garoon=3.5-sp5
Cybozu Garoon=3.7
Event History
Dec 5, 2013
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-6004?
CVE-2013-6004 is associated with a medium severity rating, indicating a significant potential for session hijacking.
2
How do I fix CVE-2013-6004?
To mitigate CVE-2013-6004, upgrade to Cybozu Garoon version 3.7.2 or later.
3
What types of attacks can exploit CVE-2013-6004?
CVE-2013-6004 can be exploited through session fixation attacks, allowing attackers to hijack legitimate user sessions.
4
What versions of Cybozu Garoon are affected by CVE-2013-6004?
CVE-2013-6004 affects all versions of Cybozu Garoon prior to 3.7.2, including several 2.x and 3.x versions.
5
Is user action required to be vulnerable to CVE-2013-6004?
No, attackers can exploit CVE-2013-6004 without any required action by the user.