medium4.3
CVE-2016-4908
Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete another user's private RSS settings via unsp…
Impact
Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete another user's private RSS settings via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cybozu | Garoon | Versions 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.1.0, 3.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/94966
- http://www.securityfocus.com/bid/97912
- https://jvn.jp/en/jp/JVN14631222/index.html
- https://support.cybozu.com/ja-jp/article/9399
- http://www.securityfocus.com/bid/94966
- http://www.securityfocus.com/bid/97912
- https://jvn.jp/en/jp/JVN14631222/index.html
- https://support.cybozu.com/ja-jp/article/9399