CVE-2015-7776: Infoleak
Published Jun 19, 2016
·Updated
Cybozu Garoon 3.x and 4.x before 4.2.0 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users via a crafted HTML e-mail message, a different vulnerability than CVE-2016-1196.
Affected Software
24 affected components
Cybozu Garoon=3.0.0
Cybozu Garoon=3.0.1
Cybozu Garoon=3.0.2
Cybozu Garoon=3.0.3
Cybozu Garoon=3.1.0
Cybozu Garoon=3.1.1
Cybozu Garoon=3.1.2
Cybozu Garoon=3.1.3
Cybozu Garoon=3.5.0
Cybozu Garoon=3.5.1
Cybozu Garoon=3.5.2
Cybozu Garoon=3.5.3
Cybozu Garoon=3.5.4
Cybozu Garoon=3.5.5
Cybozu Garoon=3.7.0
Cybozu Garoon=3.7.1
Cybozu Garoon=3.7.2
Cybozu Garoon=3.7.3
Cybozu Garoon=3.7.4
Cybozu Garoon=3.7.5
Cybozu Garoon=4.0.0
Cybozu Garoon=4.0.1
Cybozu Garoon=4.0.2
Cybozu Garoon=4.0.3
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Jun 19, 2016
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-7776?
CVE-2015-7776 is classified as a medium severity vulnerability due to its potential for remote exploitation.
2
What versions of Cybozu Garoon are affected by CVE-2015-7776?
CVE-2015-7776 affects Cybozu Garoon versions 3.x and 4.x before 4.2.0.
3
How do I fix CVE-2015-7776?
To fix CVE-2015-7776, upgrade to Cybozu Garoon version 4.2.0 or later.
4
What type of attack does CVE-2015-7776 allow?
CVE-2015-7776 allows remote attackers to track users through crafted HTML email messages.
5
Is CVE-2015-7776 a different vulnerability from CVE-2016-1196?
Yes, CVE-2015-7776 is a different vulnerability than CVE-2016-1196 that also affects Cybozu Garoon.