First published: Thu Apr 20 2017(Updated: )
Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks.
Credit: vultures@jpcert.or.jp
Affected Software | Affected Version | How to fix |
---|---|---|
Cybozu Mailwise | =5.0.0 | |
Cybozu Mailwise | =5.0.1 | |
Cybozu Mailwise | =5.0.4 | |
Cybozu Mailwise | =5.0.5 | |
Cybozu Mailwise | =5.0.6 | |
Cybozu Mailwise | =5.1.0 | |
Cybozu Mailwise | =5.1.1 | |
Cybozu Mailwise | =5.1.2 | |
Cybozu Mailwise | =5.1.4 | |
Cybozu Mailwise | =5.2.0 | |
Cybozu Mailwise | =5.2.1 | |
Cybozu Mailwise | =5.3.0 | |
Cybozu Mailwise | =5.3.1 | |
Cybozu Mailwise | =5.3.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-4844 is considered a high severity vulnerability due to its ability to allow clickjacking attacks.
To fix CVE-2016-4844, upgrade to Cybozu Mailwise version 5.4.0 or later.
CVE-2016-4844 can facilitate clickjacking attacks, which can lead to unauthorized actions being performed by users.
CVE-2016-4844 affects Cybozu Mailwise versions from 5.0.0 to 5.3.2.
Yes, there are known exploits that leverage CVE-2016-4844 for executing clickjacking attacks on vulnerable installations.