CVE-2017-2091

MEDIUM

Cybozu Garoon 3.0.0-4.2.3 - Authenticated Access Restriction Bypass in Phone Messages

Title source: llm
STIX 2.1

Description

Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_misc
https://support.cybozu.com/ja-jp/article/9570
Third Party Advisory, VDB Entry third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN73182875/index.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/96429

Scores

CVSS v3 4.3
EPSS 0.0019
EPSS Percentile 41.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Details

Status published
Products (29)
cybozu/garoon 3.0.0
cybozu/garoon 3.0.1
cybozu/garoon 3.0.2
cybozu/garoon 3.0.3
cybozu/garoon 3.1.0
cybozu/garoon 3.1.1
cybozu/garoon 3.1.2
cybozu/garoon 3.1.3
cybozu/garoon 3.5.0
cybozu/garoon 3.5.1
... and 19 more
Published Apr 28, 2017
Tracked Since Feb 18, 2026