Email Header Injection Vulnerability in Cybozu Mailwise
CVE-2016-4841

4.3MEDIUM

Key Information:

Vendor

Cybozu
Status
Mailwise
Vendor
CVE Published:
21 April 2017

What is CVE-2016-4841?

Cybozu Mailwise prior to version 5.4.0 is vulnerable to email header injection, allowing remote attackers to inject arbitrary headers into emails. This vulnerability could lead to various security issues including email spoofing and phishing attacks, compromising the integrity of email communications and user safety.

References

https://support.cybozu.com/ja-jp/article/9607
x_refsource_CONFIRM
http://www.securityfocus.com/bid/92459
vdb-entryx_refsource_BID
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000135.html
third-party-advisoryx_refsource_JVNDB

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.