CVE-2014-1996

2014-07-2010:00:00

jpcert

www.cve.org

7.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.6%

JSON

Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial of service, via an API call.

References

cs.cybozu.co.jp/information/gr20140714up01.php

jvn.jp/en/jp/JVN31082531/index.html

jvndb.jvn.jp/jvndb/JVNDB-2014-000074