PT-2022-21328 · Cybozu · Cybozu Office

Masato Kinugawa · Published 2022-08-18 · Updated 2022-08-19 · CVE-2022-32453

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cybozu Office versions 10.0.0 through 10.8.5

Description The issue allows a remote attacker to obtain and/or alter the data of the product via unspecified vectors. This is due to an HTTP header injection vulnerability.

Recommendations For Cybozu Office versions 10.0.0 through 10.8.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2022-32453

Affected Products

Cybozu Office

References · 6

• https://cs.cybozu.co.jp/2022/007584.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32453 · Security Note
• https://osv.dev/vulnerability/CVE-2022-32453 · Vendor Advisory
• https://t.me/cvenotify/34849 · Telegram Post
• https://jvn.jp/en/jp/JVN20573662/index.html · Note
• https://t.me/cibsecurity/48340 · Telegram Post