Lucene search

Japan Vulnerability NotesJVN:31230946

HistoryApr 30, 2014 - 12:00 a.m.

JVN#31230946: Cybozu Garoon API access restriction bypass vulnerability

2014-04-3000:00:00

Japan Vulnerability Notes

jvn.jp

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

68.3%

JSON

Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains an access restriction bypass vulnerability when using APIs.

Impact

Users who can log in to the system may delete schedule information that they do not have permission to edit.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

Cybozu Garoon 3.0 to 3.7 Service Pack 3

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

68.3%

JSON

Related for JVN:31230946