CVE-2017-2095

MEDIUM

Cybozu Garoon 3.0.0-4.2.3 - Authenticated Access Restriction Bypass in Mail Function

Title source: llm
STIX 2.1

Description

Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_misc
https://support.cybozu.com/ja-jp/article/9660
Third Party Advisory, VDB Entry third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN73182875/index.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/96429

Scores

CVSS v3 4.3
EPSS 0.0019
EPSS Percentile 41.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Details

Status published
Products (29)
cybozu/garoon 3.0.0
cybozu/garoon 3.0.1
cybozu/garoon 3.0.2
cybozu/garoon 3.0.3
cybozu/garoon 3.1.0
cybozu/garoon 3.1.1
cybozu/garoon 3.1.2
cybozu/garoon 3.1.3
cybozu/garoon 3.5.0
cybozu/garoon 3.5.1
... and 19 more
Published Apr 28, 2017
Tracked Since Feb 18, 2026