PT-2019-17872 · Cybozu · Cybozu Garoon

Publicado 2019-05-17 · Atualizado 2019-05-20 · CVE-2019-5931

Positive Technologies (AI Summary)

CVSS v3.1

8.7

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.0.0 through 4.6.3

Description The issue allows authenticated attackers to alter information with privileges by invoking the installer via unspecified vectors.

Recommendations For Cybozu Garoon versions 4.0.0 through 4.6.3, update to a version that contains a fix for this issue to prevent authenticated attackers from altering information with privileges.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2019-5931

Produtos afetados

Cybozu Garoon

Referências · 4

• https://kb.cybozu.support/article/34283 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5931 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5931 · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN58849431/index.html · Nota