CVE-2024-31403

2024-06-1104:27:01

jpcert

github.com

vulnerability

authorization

cybozu garoon

data alteration

AI Score

6.6

Confidence

Low

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 6.0.0 allows a remote authenticated attacker to alter and/or obtain the data of Memo.

CNA Affected

[
  {
    "vendor": "Cybozu, Inc.",
    "product": "Cybozu Garoon",
    "versions": [
      {
        "status": "affected",
        "version": "5.0.0 to 6.0.0"
      }
    ]
  }
]

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:cybozu:garoon:5.0.0:*:*:*:*:*:*:*"
    ],
    "vendor": "cybozu",
    "product": "garoon",
    "versions": [
      {
        "status": "affected",
        "version": "5.0.0",
        "versionType": "custom",
        "lessThanOrEqual": "6.0.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]