Description (CNA)
Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SiteBridge Inc. / Joruri Mail | affected 2.1.4 and earlier |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.