medium6.5
CVE-2016-1190
Cybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions on MultiReport reading via unspecified vectors.
Impact
Cybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions on MultiReport reading via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cybozu | Garoon | Versions 3.1.0, 3.1.1, 3.1.2, 3.1.3, 3.5.0, 3.5.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN18975349/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2016-000094
- https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03
- https://support.cybozu.com/ja-jp/article/8877
- http://jvn.jp/en/jp/JVN18975349/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2016-000094
- https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03
- https://support.cybozu.com/ja-jp/article/8877