Lucene search
HistoryAug 18, 2022 - 8:15 a.m.
CVE-2022-25986
cybozu office
scheduler
browse restrictions
remote authenticated attacker
data obtaining
vulnerability
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
35.3%
Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Scheduler.
Affected configurations
Node
cybozuofficeRange10.0.0–10.8.5
Related
cvelist
cvelist
CVE-2022-25986
2022-08-18 07:10:27
prion
prion
Authentication flaw
2022-08-18 08:15:00
cve
cve
CVE-2022-25986
2022-08-18 08:15:07
jvn
jvn
JVN#20573662: Multiple vulnerabilities in Cybozu Office
2022-07-20 00:00:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
35.3%
Related for NVD:CVE-2022-25986