CVE-2014-0820

Cybozu Garoon 2.x-2.5.4 and 3.x-3.7 SP3 - Authenticated Path Traversal via Download Feature

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to read arbitrary files via unspecified vectors.

References (5)

Core 5
Core References
Vendor Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN26393529/index.html
Vendor Advisory x_refsource_confirm
http://cs.cybozu.co.jp/information/gr20140225up05.php
Vendor Advisory third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000023
Vendor Advisory x_refsource_confirm
https://support.cybozu.com/ja-jp/article/7994
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/65815

Scores

EPSS 0.0023
EPSS Percentile 46.1%

Details

CWE
CWE-22
Status published
Products (24)
cybozu/garoon 2.0 sp1 (6 CPE variants)
cybozu/garoon 2.0.0
cybozu/garoon 2.0.1
cybozu/garoon 2.0.2
cybozu/garoon 2.0.3
cybozu/garoon 2.0.4
cybozu/garoon 2.0.5
cybozu/garoon 2.0.6
cybozu/garoon 2.1 (4 CPE variants)
cybozu/garoon 2.1.0
... and 14 more
Published Feb 27, 2014
Tracked Since Feb 18, 2026