6

CVE-2014-1989

Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
CybozuGaroon Version3.0.0
CybozuGaroon Version3.0.1
CybozuGaroon Version3.0.2
CybozuGaroon Version3.0.3
CybozuGaroon Version3.1.0
CybozuGaroon Version3.1.1
CybozuGaroon Version3.1.2
CybozuGaroon Version3.1.3
CybozuGaroon Version3.5.0
CybozuGaroon Version3.5.1
CybozuGaroon Version3.5.2
CybozuGaroon Version3.5.3
CybozuGaroon Version3.5.4
CybozuGaroon Version3.5.5
CybozuGaroon Version3.7 Updatesp1
CybozuGaroon Version3.7 Updatesp2
CybozuGaroon Version3.7 Updatesp3
CybozuGaroon Version3.7.0
CybozuGaroon Version3.7.1
CybozuGaroon Version3.7.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.06% 0.602
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6 6.8 6.4
AV:N/AC:M/Au:S/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://jvn.jp/en/jp/JVN31230946/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000043
https://support.cybozu.com/ja/article/5264
Vendor Advisory