CVE-2016-1195: High severity cybozu garoon vulnerability
Published Jun 19, 2016
·Updated
Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.
Affected Software
25 affected components
Cybozu Garoon=3.0.0
Cybozu Garoon=3.0.1
Cybozu Garoon=3.0.2
Cybozu Garoon=3.0.3
Cybozu Garoon=3.1.0
Cybozu Garoon=3.1.1
Cybozu Garoon=3.1.2
Cybozu Garoon=3.1.3
Cybozu Garoon=3.5.0
Cybozu Garoon=3.5.1
Cybozu Garoon=3.5.2
Cybozu Garoon=3.5.3
Cybozu Garoon=3.5.4
Cybozu Garoon=3.5.5
Cybozu Garoon=3.7.0
Cybozu Garoon=3.7.1
Cybozu Garoon=3.7.2
Cybozu Garoon=3.7.3
Cybozu Garoon=3.7.4
Cybozu Garoon=3.7.5
Cybozu Garoon=4.0.0
Cybozu Garoon=4.0.1
Cybozu Garoon=4.0.2
Cybozu Garoon=4.0.3
Cybozu Garoon=4.2.0
Remediation
Patch Available
Event History
Jun 19, 2016
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1195?
CVE-2016-1195 is classified as a high severity vulnerability due to its potential for exploitation in phishing attacks.
2
What software versions are affected by CVE-2016-1195?
CVE-2016-1195 affects Cybozu Garoon versions 3.x and 4.x prior to 4.2.1.
3
How do I fix CVE-2016-1195?
To fix CVE-2016-1195, upgrade Cybozu Garoon to version 4.2.1 or later.
4
What type of attacks can be performed using CVE-2016-1195?
CVE-2016-1195 allows attackers to conduct open redirect attacks, leading to potential phishing schemes.
5
Is there a workaround for CVE-2016-1195?
Currently, the only effective workaround for CVE-2016-1195 is to upgrade to the patched version of Cybozu Garoon.