Design/Logic Flaw

2014-07-2011:12:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.6%

JSON

Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial of service, via an API call.

CPENameOperatorVersion
garooneq3.7 sp2
garooneq3.7.0
garooneq3.7 sp1
garooneq3.7 sp3

Name	Operator	Version
garoon	eq	3.7 sp2
garoon	eq	3.7.0
garoon	eq	3.7 sp1
garoon	eq	3.7 sp3

References

cs.cybozu.co.jp/information/gr20140714up01.php

jvn.jp/en/jp/JVN31082531/index.html

jvndb.jvn.jp/jvndb/JVNDB-2014-000074