CVE-2008-6744
Summary
| CVE | CVE-2008-6744 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-04-23 17:30:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:M/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cybozu | Cybozu Dezie | All | All | All | All |
| Application | Cybozu | Cybozu Garoon | 2.0.0 | All | All | All |
| Application | Cybozu | Cybozu Garoon | 2.0.1 | All | All | All |
| Application | Cybozu | Cybozu Garoon | 2.0.2 | All | All | All |
| Application | Cybozu | Cybozu Garoon | 2.0.3 | All | All | All |
| Application | Cybozu | Cybozu Garoon | 2.0.4 | All | All | All |
| Application | Cybozu | Cybozu Garoon | 2.0.5 | All | All | All |
| Application | Cybozu | Cybozu Garoon | 2.0.6 | All | All | All |
| Application | Cybozu | Cybozu Garoon | 2.1.0 | All | All | All |
| Application | Cybozu | Cybozu Garoon | 2.1.1 | All | All | All |
| Application | Cybozu | Cybozu Garoon | 2.1.2 | All | All | All |
| Application | Cybozu | Cybozu Garoon | 2.1.3 | All | All | All |
| Application | Cybozu | Cybozu Office | 6 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| osvdb.org/46575 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| お探しのページが見つかりませんでした。 | サイボウズ株式会社 | af854a3a-2127-422b-91ae-364da2661108 | cybozu.co.jp | Vendor Advisory |
| お探しのページが見つかりませんでした。 | サイボウズ株式会社 | af854a3a-2127-422b-91ae-364da2661108 | cybozu.co.jp | Vendor Advisory |
| Cybozu Products Cross-Site Request Forgery Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| JVN#18405927 Multiple Cybozu products vulnerable to cross-site request forgery | af854a3a-2127-422b-91ae-364da2661108 | jvn.jp | |
| jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000033.html | af854a3a-2127-422b-91ae-364da2661108 | jvndb.jvn.jp | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.