CVE-2021-20632

MEDIUM

Cybozu Office <10.9 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Bulletin Board via unspecified vectors.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://jvn.jp/en/jp/JVN45797538/index.html
Vendor Advisory x_refsource_misc
https://kb.cybozu.support/article/36870/

Scores

CVSS v3 4.3
EPSS 0.0023
EPSS Percentile 45.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

Status published
Products (1)
cybozu/office 10.0.0 - 10.8.4
Published Mar 18, 2021
Tracked Since Feb 18, 2026