ByteOS Network

NVD Vulnerability Details :

CVE-2019-6004

Analyzed

Source-vultures@jpcert.or.jp

Published At-12 Sep, 2019 | 17:15

Updated At-16 Sep, 2019 | 19:22

Open redirect vulnerability in ApeosWare Management Suite Ver.1.4.0.18 and earlier, and ApeosWare Management Suite 2 Ver.2.1.2.4 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.1	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Primary	2.0	5.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:N

CPE Matches

fujixerox>>apeosware_management_suite>>Versions up to 1.4.0.18(inclusive)

cpe:2.3:a:fujixerox:apeosware_management_suite:*:*:*:*:*:*:*:*

fujixerox>>apeosware_management_suite_2>>Versions up to 2.1.2.4(inclusive)

cpe:2.3:a:fujixerox:apeosware_management_suite_2:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-601	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://jvn.jp/en/jp/JVN07679150/index.html	vultures@jpcert.or.jp	Third Party Advisory
http://onlinesupport.fujixerox.com/processDriverForm.do?ctry_code=SG&lang_code=en&d_lang=en&corp_pid=AWMS2&rts=null&model=ApeosWare+Management+Suite+2&type_id=7&oslist=Windows+10+64bit&lang_list=en	vultures@jpcert.or.jp	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History