Design/Logic Flaw

Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary report titles via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8485, and CVE-2016-1152...

CVE-2015-8484

CVE-2015-8484 concerns Cybozu Office versions 9.9.0 through 10.3.0 where remote authenticated users can bypass calendar-viewing restrictions. The Connected document CVE-2016-1152 confirms a related issue in Cybozu Office 9.9.0 through 10.3.0: remote authenticated users can bypass access restricti...

CVE-2015-8484

Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended calendar-viewing restrictions via unspecified vectors, a different vulnerability than CVE-2015-8485, CVE-2015-8486, and CVE-2016-1152...