1514 matches found
Privilege escalation
Exposure of sensitive information to an unauthorized actor issue in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to obtain the data without the viewing privilege...
Design/Logic Flaw
Operation restriction bypass in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to alter the file information and/or delete the files...
CVE-2022-31472
Browse restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to obtain the data of Cabinet...
CVE-2022-31472
CVE-2022-31472 affects Cybozu Garoon, specifically the Cabinet module. A browse restriction bypass allows a remote authenticated user to obtain Cabinet data in Garoon versions 4.0.0–5.5.1. Exploitation details are not provided in the documents. Remediation per the sources is to update to the late...
CVE-2022-30943
Browsing restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to obtain the data of Bulletin...
CVE-2022-30943
The CVE-2022-30943 entry affects Cybozu Garoon, specifically versions 4.0.0 to 5.9.1. The vulnerability is a browsing restriction bypass in Bulletin, enabling a remote authenticated attacker to obtain Bulletin data due to improper access restrictions. Impact details from the sources describe data...
CVE-2022-30602
The CVE-2022-30602 issue affects Cybozu Garoon 4.0.0–5.9.1. Description and connected sources confirm an authorization/privilege-management flaw (operation restriction bypass) that lets an authenticated remote user alter file information and/or delete files. The root cause is an improper privileg...
CVE-2022-30602
Operation restriction bypass in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to alter the file information and/or delete the files...
CVE-2022-29512
CVE-2022-29512 affects Cybozu Garoon 4.0.0–5.9.1. The issue is an information disclosure where a remote authenticated attacker may obtain data without the viewing privilege, through an exposure in multiple Garoon applications. Root cause details indicate improper handling that allows exporting or...
CVE-2022-29512
Exposure of sensitive information to an unauthorized actor issue in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to obtain the data without the viewing privilege...
PT-2022-19669 · Cybozu · Cybozu Garoon
Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.9.1 Description: The issue allows a remote authenticated attacker to obtain sensitive information without the necessary viewing privilege, potentially exposing data to unauthorized actors. Recommendation...
Cybozu Garoon Information Disclosure Vulnerability (CNVD-2022-69532)
Cybozu Garoon is a portal-based OA office system from Cybozu Japan. The system provides portal, E-mail, bookmark, scheduler, bulletin board, document management, etc. An information disclosure vulnerability exists in Cybozu Garoon, which stems from exporting too much data in multiple applications...
Cybozu Garoon Input Validation Error Vulnerability (CNVD-2022-69531)
Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, E-mail, bookmark, scheduler, bulletin board, document management, etc. An input validation error vulnerability exists in the Space component of Cybozu Garoon versions 4.0.0 to 5.5.1. An authenticated...
Cybozu Garoon License Issue Vulnerability (CNVD-2022-69536)
Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An authorization issue vulnerability exists in Cybozu Garoon. The vulnerability stems from improper privilege...
CVE-2022-28718
Operation restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.5.1 allow a remote authenticated attacker to alter the data of Bulletin...
CVE-2022-27803
Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Space...
CVE-2022-29471
Browse restriction bypass vulnerability in Bulletin of Cybozu Garoon allows a remote authenticated attacker to obtain the data of Bulletin...
CVE-2022-27661
Operation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Workflow...