CVE-2016-1190

MEDIUM

Cybozu Garoon <4.2 - Auth Bypass

Title source: llm

Description

Cybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions on MultiReport reading via unspecified vectors.

References (4)

Scores

CVSS v3 6.5
EPSS 0.0017
EPSS Percentile 38.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-284
Status draft

Affected Products (21)

cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
... and 6 more

Timeline

Published Jun 25, 2016
Tracked Since Feb 18, 2026