CVE-2016-1188
published 2016-06-25CVE-2016-1188: Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors.
PriorityP430medium6.5CVSS 3.0
AVNACLPRLUINSUCNIHAN
EPSS
1.14%
62.6th percentile
Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
| cybozu | garoon | — | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
ghsa5.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Jenkins Eggplant Runner Plugin protection mechanism disabled
ghsa·2025-10-29·CVSS 5.9
CVE-2025-64135 [MEDIUM] CWE-1188 Jenkins Eggplant Runner Plugin protection mechanism disabled
Jenkins Eggplant Runner Plugin protection mechanism disabled
Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb_8 and earlier sets the Java system property `jdk.http.auth.tunneling.disabledSchemes` to an empty value as part of applying a proxy configuration.
This disables a protection mechanism of the Java runtime addressing CVE-2016-5597.
As of publication of this advisory, there is no fix.
GHSA
GHSA-9vjx-78j6-79mw: Cybozu Garoon 3
ghsa_unreviewed·2022-05-17
CVE-2016-1188 [MEDIUM] GHSA-9vjx-78j6-79mw: Cybozu Garoon 3
Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://jvn.jp/en/jp/JVN18975349/index.htmlhttp://jvndb.jvn.jp/jvndb/JVNDB-2016-000077https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03https://support.cybozu.com/ja-jp/article/8845http://jvn.jp/en/jp/JVN18975349/index.htmlhttp://jvndb.jvn.jp/jvndb/JVNDB-2016-000077https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03https://support.cybozu.com/ja-jp/article/8845
2016-06-25
Published