CVE-2020-5587

Cybozu Garoon 4.0.0 to 5.0.1 allow remote authenticated attackers to obtain unintended information via unspecified vectors...

CVE-2020-5587

Summary: CVE-2020-5587 affects Cybozu Garoon 4.0.0–5.0.1, with information disclosure possible to remote authenticated attackers via unspecified vectors. The impact is exposure of unintended information. Affected products/versions (as provided): Cybozu Garoon 4.0.0 to 5.0.1. Root cause / vectors:...

CVE-2020-5587

Cybozu Garoon 4.0.0 to 5.0.1 allow remote authenticated attackers to obtain unintended information via unspecified vectors...

CVE-2020-5588

Path traversal vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to obtain unintended information via unspecified vectors...

CVE-2020-5588

CVE-2020-5588 affects Cybozu Garoon 5.0.0–5.0.1 and is a path traversal vulnerability that allows an attacker with administrator rights to obtain unintended information via unspecified vectors. Connected sources (CyVDB/NVD/Red Hat/JVN/CVEs) describe multiple related vulnerabilities in Cybozu Garo...

CVE-2020-5585

CVE-2020-5585 affects Cybozu Garoon 5.0.0–5.0.1. It is a Cross-Site Scripting vulnerability that can be exploited by an attacker with administrator rights to inject arbitrary scripts into the browser, via unspecified vectors. In the consolidated disclosures, CyVDB enumerates related entries for G...

CVE-2020-5585

Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors...

CVE-2020-5586

Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors...

CVE-2020-5586

Cybozu Garoon versions 4.10.3 through 5.0.1 contain a cross-site scripting vulnerability that can be exploited by an attacker with administrator rights to inject arbitrary scripts via unspecified vectors. Documented impact indicates that an arbitrary script could be executed in the browser of an ...

CVE-2020-5583

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors...

CVE-2020-5583

CVE-2020-5583 affects Cybozu Garoon 4.0.0 to 5.0.1. The vulnerability allows remote authenticated attackers to bypass access restrictions and obtain unauthorized Multi-Report data via unspecified vectors, effectively bypassing view privileges for that data. Impact is limited to exposure of Multi-...

CVE-2020-5584

Cybozu Garoon 4.0.0 to 5.0.1 allow remote attackers to obtain unintended information via unspecified vectors...

CVE-2020-5584

CVE-2020-5584 affects Cybozu Garoon 4.0.0 through 5.0.1. The published sources describe a token-related information leakage that allows remote attackers to obtain unintended information via unspecified vectors. Related entries (CyVDB/Red Hat/JVN/CNVD) confirm multiple vulnerabilities in Cybozu Ga...

CVE-2020-5581

Path traversal vulnerability in Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to obtain unintended information via unspecified vectors...

CVE-2020-5582

CVE-2020-5582 affects Cybozu Garoon 4.0.0–5.0.1. The vulnerability allows remote authenticated attackers to bypass access restrictions and alter data for files attached to Reports via unspecified vectors (privilege bypass on attachments). Documented impact includes unauthorized modification of re...

CVE-2020-5582

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to Report via unspecified vectors...

CVE-2020-5581

CVE-2020-5581 is a path-traversal vulnerability in Cybozu Garoon 4.0.0–5.0.1 that allows remote authenticated attackers to obtain unintended information via unspecified vectors. The vulnerability affects Cybozu Garoon’s portal-related components and could lead to information disclosure as summari...

CVE-2020-5580

Affected software: Cybozu Garoon 4.0.0–5.0.1. Issue: CVE-2020-5580 allows remote authenticated attackers to bypass access restrictions to view and/or alter Single sign-on (SSO) settings via unspecified vectors. Root cause: bypass of SSO access controls leading to privilege escalation in SSO confi...

CVE-2020-5580

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to view and/or alter Single sign-on settings via unspecified vectors...

Cybozu Garoon path traversal vulnerability (CNVD-2020-36769)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A path traversal vulnerability exists in Cybozu Garoon versions 5.0.0 through 5.0.1. An attacker can exploit this...