CVE-2021-20634

2021-03-1800:56:03

jpcert

www.cve.org

access control

cybozu office 10

vulnerability

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

Improper access control vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the date of Custom App via unspecified vectors.

CNA Affected

[
  {
    "product": "Cybozu Office",
    "vendor": "Cybozu, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0 to 10.8.4"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN45797538/index.html

kb.cybozu.support/article/36865/