CVE-2018-16178: Undefined Security Weakness

Cybozu Garoon 3.0.0 to 4.10.0 allows remote attackers to bypass access restriction to view information available only for a sign-on user via Single sign-on function...

PT-2019-9243

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.10.0 Description The issue allows remote attackers to bypass access restrictions and view information that is only available to signed-on users through the Single sign-on function. Recommendations For...

Cybozu Garoon Access Privilege Bypass Vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. An access privilege bypass vulnerability exists i...

Cybozu Garoon access restriction bypass vulnerability

Overview Single sign-on function of Cybozu Garoon provided by Cybozu, Inc. contains a restriction bypass vulnerability CWE-284. Kanta Nishitani reported this vulnerability to Cybozu, Inc., and Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN...

JVN#25385698: Cybozu Garoon access restriction bypass vulnerability

Single sign-on function of Cybozu Garoon provided by Cybozu, Inc. contains a restriction bypass vulnerability CWE-284. Impact An attacker who can access the product may bypass authentication of Single sign-on function and view the information which is available only for sign-on users. Solution...

CVE-2018-0673

Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers to read arbitrary files via unspecified vectors...

CVE-2018-0673

Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers to read arbitrary files via unspecified vectors...

CVE-2018-0673

Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers to read arbitrary files via unspecified vectors...

CVE-2018-0673: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers to read arbitrary files via unspecified vectors...

PT-2018-9004

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.5.0 through 4.6.3 Description A directory traversal issue allows authenticated attackers to read arbitrary files. Recommendations For Cybozu Garoon versions 3.5.0 through 4.6.3, update to a version that contains a fix...

Cybozu Garoon Path Traversal Vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A path traversal vulnerability...

Cybozu Garoon vulnerable to directory traversal

Overview Cybozu Garoon provided by Cybozu, Inc. contains a directory traversal vulnerability CWE-22 due to a flaw in processing of the session information. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated und...

JVN#12583112: Cybozu Garoon vulnerable to directory traversal

Cybozu Garoon provided by Cybozu, Inc. contains a directory traversal vulnerability CWE-22 due to a flaw in processing of the session information. Impact A user who can login to the product may obtain or alter arbitrary files on the server. Solution Apply the Patch Apply the patch according to th...

Cybozu Garoon Notifications Application SQL Injection Vulnerability

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc., and supports switching between three languages Chinese, Japanese, and English. notifications application is one of the...

Cybozu Garoon 3.5.0 - 4.6.2 Notification List SQLi Vulnerability

Cybozu Garoon is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon";...

Sql injection

SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2018-0607

SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2018-0607

CVE-2018-0607 affects Cybozu Garoon in the Notifications module (versions 3.5.0–4.6.2). The vulnerability is an SQL injection in the Notifications application that allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Root cause is a flaw in input handli...

CVE-2018-0607

SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...