CVE-2018-0531

CVE-2018-0531 affects Cybozu Garoon 3.0.0–4.2.6. The issue is an operation restriction bypass in the folder settings (CWE-264) that allows remote authenticated users with folder-administrator privileges to bypass access restrictions and view or alter a folder’s access privileges and/or notificati...

JVN#65268217: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. SQL injection in the application "Address" CWE-89 - CVE-2018-0530 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N| Base Score: 6.5 CVSS v2| AV:N/AC:L/Au:S/C:P/I:N/A:N|...