CVE-2019-5966

Summary

Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors.

Affected Software

VendorProductVersion RangeStatus
SiteBridge Inc.Joruri Mail2.1.4 and earlieraffected

Weaknesses

  • Fails to manage sessions

ADP Enrichment

CVE Program Container

Additional References

References