Design/Logic Flaw

2019-05-1716:29:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.5%

JSON

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to obtain files without access privileges via the Multiple Files Download function of application ‘Cabinet’.

CPENameOperatorVersion
garoonge4.0.0
garoonle4.10.1

CPE	Name	Operator	Version
	garoon	ge	4.0.0
	garoon	le	4.10.1

References

jvn.jp/en/jp/JVN58849431/index.html

kb.cybozu.support/article/35485/