medium4.3
CVE-2017-10857
Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function.
Impact
Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cybozu | Office | Versions 10.0.0, 10.0.1, 10.0.2, 10.1.0, 10.1.2, 10.2.0 |