PT-2019-17948 · Cybozu · Cybozu Office

Tanghaifeng · Publicado 2019-12-26 · Atualizado 2020-08-24 · CVE-2019-6023

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cybozu Office versions 10.0.0 through 10.8.3

Description The issue allows remote authenticated attackers to bypass access restrictions, potentially resulting in obtaining data without proper access privileges. This is achieved via the application 'Address'.

Recommendations For Cybozu Office versions 10.0.0 through 10.8.3, consider restricting access to the 'Address' application until a patch is available. As a temporary workaround, review and enforce strict access controls to minimize the risk of unauthorized data access.

Correção

Identificadores relacionados

CVE-2019-6023

Produtos afetados

Cybozu Office

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-6023 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-6023 · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN79854355/index.html · Nota
• https://kb.cybozu.support/article/36130 · Aviso do Fabricante