VulnerabilityModified
CVE-2017-2165
GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors.
MEDIUM 6.5EPSS 1.34%
Does this matter?
Lower severity and a low EPSS score (1.34%). Track it; it rarely justifies an emergency change on its own.
Description
GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors.
- CVSS 3.0
- 6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 1.34% probability · 70th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- groupsession/groupsession
- Source
- vultures@jpcert.or.jp
References
- http://jvn.jp/en/jp/JVN42164352/index.htmlThird Party Advisory
- http://www.securityfocus.com/bid/98719Third Party Advisory, VDB Entry
- http://jvn.jp/en/jp/JVN42164352/index.htmlThird Party Advisory
- http://www.securityfocus.com/bid/98719Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.