CVE-2008-6569

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

Session fixation vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack web sessions via the session ID in the login page.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://cybozu.co.jp/products/dl/notice/detail/0021.htmlVendor Advisory
http://jvn.jp/en/jp/JVN18700809/index.htmlVendor Advisory
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000034.htmlVendor Advisory
http://osvdb.org/46564
http://secunia.com/advisories/30871Vendor Advisory
http://www.lac.co.jp/info/advisory/98.html
http://www.securityfocus.com/bid/29981
https://exchange.xforce.ibmcloud.com/vulnerabilities/43427
http://cybozu.co.jp/products/dl/notice/detail/0021.htmlVendor Advisory
http://jvn.jp/en/jp/JVN18700809/index.htmlVendor Advisory
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000034.htmlVendor Advisory
http://osvdb.org/46564
http://secunia.com/advisories/30871Vendor Advisory
http://www.lac.co.jp/info/advisory/98.html
http://www.securityfocus.com/bid/29981
https://exchange.xforce.ibmcloud.com/vulnerabilities/43427

Timeline

Published: Mar 31, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008

CVE-2008-65704.3Cross-site scripting (XSS) vulnerability in the RSS reader in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary CVE-2008-65714.3Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.4 might allow remote attackers to inject arbitrary web script or HT CVE-2008-65726.8SQL injection vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to execute arbitrary SQL commands via t CVE-2008-65736.8Multiple SQL injection vulnerabilities in Avaya SIP Enablement Services (SES) in Avaya Avaya Communication Manager 3.x, 4.0, and 5.0 (1) all CVE-2008-65747.5Unspecified vulnerability in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote attackers to gain priv CVE-2008-65756.8Unspecified vulnerability in the SIP server in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote auth CVE-2008-65767.8Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when CVE-2008-657710.0Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain multiple unspecified hard-coded ac CVE-2008-657810.0Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gain CVE-2008-65795.0Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application structure via unknown vectors related to "web reso CVE-2008-65805.0The Red_Reservations script for ColdFusion stores sensitive information under the web root with insufficient access control, which allows re CVE-2008-65817.5login.php in PhpAddEdit 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the addedit cookie pa