medium5.4
CVE-2019-5966
Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the informat…
Impact
Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joruri | Joruri Mail | through 2.1.4 |