CVE-2015-5649

Published: Oct 8, 2015Modified: May 6, 2026

7.0

Vector

AV:N/AC:M/Au:S/C:C/I:P/A:N

Exploitability: 6.8 / Impact: 7.8

Source: NVD

Description

Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended login restrictions or obtain sensitive information, by leveraging certain group-administration privileges.

Affected (23)

Products: Cybozu: Garoon

Cybozu

1 product

Garoon

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Cybozu Garoon	Version 3.0.0
Cybozu Garoon	Version 3.0.1
Cybozu Garoon	Version 3.0.2
Cybozu Garoon	Version 3.0.3
Cybozu Garoon	Version 3.1.0
Cybozu Garoon	Version 3.1.1
Cybozu Garoon	Version 3.1.2
Cybozu Garoon	Version 3.1.3
Cybozu Garoon	Version 3.5.0
Cybozu Garoon	Version 3.5.1
Cybozu Garoon	Version 3.5.2
Cybozu Garoon	Version 3.5.3
Cybozu Garoon	Version 3.5.4
Cybozu Garoon	Version 3.5.5
Cybozu Garoon	Version 3.7.0
Cybozu Garoon	Version 3.7.1
Cybozu Garoon	Version 3.7.2
Cybozu Garoon	Version 3.7.3
Cybozu Garoon	Version 3.7 sp1
Cybozu Garoon	Version 3.7 sp2
Cybozu Garoon	Version 3.7 sp3
Cybozu Garoon	Version 4.0.0
Cybozu Garoon	Version 4.0.3