CVE-2021-20632

2021-03-1800:56:02

jpcert

www.cve.org

access control

cybozu office

data breach

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Bulletin Board via unspecified vectors.

CNA Affected

[
  {
    "product": "Cybozu Office",
    "vendor": "Cybozu, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0 to 10.8.4"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN45797538/index.html

kb.cybozu.support/article/36870/