Lucene search
HistoryAug 18, 2022 - 8:15 a.m.
CVE-2022-29891
cybozu office
custom app
browse restriction bypass
cve-2022-29891
remote authenticated attacker
data obtain
unspecified vectors
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
35.3%
Browse restriction bypass vulnerability in Custom Ap of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Custom App via unspecified vectors.
Affected configurations
Node
cybozuofficeRange10.0.0–10.8.5
Related
cvelist
cvelist
CVE-2022-29891
2022-08-18 07:11:37
prion
prion
Authentication flaw
2022-08-18 08:15:00
cve
cve
CVE-2022-29891
2022-08-18 08:15:07
jvn
jvn
JVN#20573662: Multiple vulnerabilities in Cybozu Office
2022-07-20 00:00:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
35.3%
Related for NVD:CVE-2022-29891