CVE-2019-6023

2019-12-2615:16:50

jpcert

www.cve.org

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.5%

JSON

Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to bypass access restriction which may result in obtaining data without access privileges via the application ‘Address’.

CNA Affected

[
  {
    "product": "Cybozu Office",
    "vendor": "Cybozu, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0 to 10.8.3"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN79854355/index.html

kb.cybozu.support/article/36130