CVE-2017-10857

Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function...

CVE-2017-10857

Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function...

CVE-2017-10857

CVE-2017-10857 affects Cybozu Office (versions 10.0.0–10.6.1). The flaw allows an authenticated user to bypass access restrictions and perform arbitrary actions through the Cabinet function, enabling access to folders they should not reach and to act with the user’s privileges. The underlying iss...