PT-2016-3910 · Cybozu · Office

Published 2016-02-17 · Updated 2016-02-22 · CVE-2015-8485

NVD

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:P

Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary posting titles via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8486, and CVE-2016-1152.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-8485

Affected Products

Office

References · 4

• https://cs.cybozu.co.jp/2015/006077.html · Vendor Advisory
• http://jvn.jp/en/jp/JVN48720230/index.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8485 · Security Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023 · Vendor Advisory