PT-2019-17947 · Cybozu · Cybozu Office

Shoji Baba · Publicado 2019-12-26 · Atualizado 2019-12-30 · CVE-2019-6022

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cybozu Office versions 10.0.0 through 10.8.3

Description A directory traversal issue allows remote authenticated attackers to modify arbitrary files using the Customapp function.

Recommendations For Cybozu Office versions 10.0.0 through 10.8.3, consider restricting access to the Customapp function until a patch is available.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-6022

Produtos afetados

Cybozu Office

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-6022 · Nota de Segurança
• https://kb.cybozu.support/article/36124 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-6022 · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN79854355/index.html · Nota