VULNERABILITY INTELLIGENCE
CVE-2014-1984
CVSS score6.8 MEDIUM
EPSS probability1.72%
CISA KEVNot currently listed
Published2014-04-19
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via unspecified vectors.
Weakness classification
- CWE-287: Improper Authentication
Primary references
- vultures@jpcert.or.jp — Patch, Vendor Advisory
- vultures@jpcert.or.jp — Third Party Advisory, VDB Entry
- vultures@jpcert.or.jp — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry