ID CVE-2017-2092 Type cve Reporter cve@mitre.org Modified 2017-05-03T12:19:00
Description
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
{"openvas": [{"lastseen": "2019-05-29T18:34:08", "bulletinFamily": "scanner", "cvelist": ["CVE-2017-2091", "CVE-2017-2094", "CVE-2017-2095", "CVE-2017-2093", "CVE-2017-2092"], "description": "This host is installed with Cybozu Garoon\n and is vulnerable to multiple vulnerabilities.", "modified": "2018-10-12T00:00:00", "published": "2017-07-18T00:00:00", "id": "OPENVAS:1361412562310108193", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310108193", "type": "openvas", "title": "Cybozu Garoon Multiple Vulnerabilities - Apr17", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_cybozu_garoon_mult_vuln_apr17.nasl 11863 2018-10-12 09:42:02Z mmartin $\n#\n# Cybozu Garoon Multiple Vulnerabilities - Apr17\n#\n# Authors:\n# Christian Fischer <christian.fischer@greenbone.net>\n#\n# Copyright:\n# Copyright (c) 2017 Greenbone Networks GmbH\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:cybozu:garoon\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.108193\");\n script_version(\"$Revision: 11863 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-10-12 11:42:02 +0200 (Fri, 12 Oct 2018) $\");\n script_tag(name:\"creation_date\", value:\"2017-07-18 11:54:29 +0200 (Tue, 18 Jul 2017)\");\n script_cve_id(\"CVE-2017-2091\", \"CVE-2017-2092\", \"CVE-2017-2093\", \"CVE-2017-2094\", \"CVE-2017-2095\");\n script_tag(name:\"cvss_base\", value:\"4.3\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:N/A:N\");\n script_name(\"Cybozu Garoon Multiple Vulnerabilities - Apr17\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2017 Greenbone Networks GmbH\");\n script_family(\"Web application abuses\");\n script_dependencies(\"secpod_cybozu_products_detect.nasl\");\n script_require_ports(\"Services/www\", 80);\n script_mandatory_keys(\"CybozuGaroon/Installed\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Cybozu Garoon\n and is vulnerable to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Cybozu Garoon is prone to multiple vulnerabilities\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow remote authenticated attackers to:\n\n - bypass access restriction\n\n - to inject arbitrary web script or HTML\n\n - obtain tokens used for CSRF protection.\");\n\n script_tag(name:\"affected\", value:\"Cybozu Garoon 3.0.0 to 4.2.3.\");\n\n script_tag(name:\"solution\", value:\"Update to Cybozu Garoon 4.2.4 or later.\");\n\n script_tag(name:\"qod_type\", value:\"remote_banner\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif( ! port = get_app_port( cpe:CPE ) ) exit( 0 );\nif( ! vers = get_app_version( cpe:CPE, port:port ) ) exit( 0 );\n\nif( version_in_range( version:vers, test_version:\"3.0.0\", test_version2:\"4.2.3\" ) ) {\n report = report_fixed_ver( installed_version:vers, fixed_version:\"4.2.4\" );\n security_message( port:port, data:report );\n exit( 0 );\n}\n\nexit ( 99 );\n", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:P/I:N/A:N"}}], "jvn": [{"lastseen": "2019-05-29T19:49:09", "bulletinFamily": "info", "cvelist": ["CVE-2017-2091", "CVE-2017-2094", "CVE-2017-2095", "CVE-2017-2090", "CVE-2017-2093", "CVE-2017-2092"], "description": "\n ## Description\n\nCybozu Garoon provided by Cybozu,Inc. is a groupware. Cybozu Garoon contains multiple vulnerabilities listed below. \n\n * **SQL injection ([CWE-89](<https://cwe.mitre.org/data/definitions/89.html>))** \\- CVE-2017-2090 CVSS v3 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | **Base Score: 6.3** \n---|---|--- \nCVSS v2 | AV:N/AC:L/Au:S/C:P/I:P/A:P | **Base Score: 6.5** \n * **Access restriction flaw in the Phone Messages function ([CWE-284](<https://cwe.mitre.org/data/definitions/284.html>))** \\- CVE-2017-2091 CVSS v3 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N | **Base Score: 4.3** \n---|---|--- \nCVSS v2 | AV:N/AC:L/Au:S/C:N/I:P/A:N | **Base Score: 4.0** \n * **Cross-site scripting ([CWE-79](<https://cwe.mitre.org/data/definitions/79.html>))** \\- CVE-2017-2092 CVSS v3 | CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L | **Base Score: 5.4** \n---|---|--- \nCVSS v2 | AV:N/AC:L/Au:S/C:N/I:P/A:N | **Base Score: 4.0** \n * **Information disclosure ([CWE-200](<https://cwe.mitre.org/data/definitions/200.html>))** \\- CVE-2017-2093 CVSS v3 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N | **Base Score: 4.3** \n---|---|--- \nCVSS v2 | AV:N/AC:M/Au:N/C:P/I:N/A:N | **Base Score: 4.3** \n * **Access restriction flaw in Workflow and the function \"MultiReport\" ([CWE-284](<https://cwe.mitre.org/data/definitions/284.html>))** \\- CVE-2017-2094 CVSS v3 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:M/I:L/A:N | **Base Score: 4.3** \n---|---|--- \nCVSS v2 | AV:N/AC:L/Au:S/C:N/I:P/A:N | **Base Score: 4.0** \n * **Access restriction flaw in the mail function ([CWE-284](<https://cwe.mitre.org/data/definitions/284.html>))** \\- CVE-2017-2095 CVSS v3 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:M/I:L/A:N | **Base Score: 4.3** \n---|---|--- \nCVSS v2 | AV:N/AC:L/Au:S/C:N/I:P/A:N | Base Score: 4.0\n\n ## Impact\n\n * A user may execute arbitrary SQL commands - CVE-2017-2090\n * A user may set uncofirmed phone messages to be displayed as if they have already been confirmed - CVE-2017-2091\n * Arbitrary scripts may be executed on the logged-in user's web browser - CVE-2017-2092\n * Token used for cross-site request forgery (CSRF) protection may be disclosed - CVE-2017-2093\n * A user may alter or delete information of Workflow and the multi report function, which the user does not have permission to access - CVE-2017-2094\n * A user may alter the order of the mail folders - CVE-2017-2095\n\n ## Solution\n\n**Update the Software** \nUpdate to the latest version according to the information provided by the developer.\n\n ## Products Affected\n\n * Cybozu Garoon 3.0.0 to 4.2.3\n", "edition": 5, "modified": "2017-02-20T00:00:00", "published": "2017-02-20T00:00:00", "id": "JVN:73182875", "href": "http://jvn.jp/en/jp/JVN73182875/index.html", "title": "JVN#73182875: Multiple vulnerabilities in Cybozu Garoon", "type": "jvn", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:P/I:N/A:N"}}]}
