PT-2016-3914
CVE-2015-8489
·
تاريخ النشر
2016-02-17
·
تاريخ التحديث
2016-02-22
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Cybozu Office versions 9.9.0 through 10.3.0
Description
The issue allows remote authenticated users to cause a denial of service, specifically excessive database locking, by utilizing a crafted CSV file.
Recommendations
For Cybozu Office versions 9.9.0 through 10.3.0, consider restricting access to the CSV file import feature until a patch is available to prevent excessive database locking.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾