PT-2017-8605
CVE-2016-4910
·
تاريخ النشر
2017-06-09
·
تاريخ التحديث
2017-06-13
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Cybozu Garoon versions 3.0.0 through 4.2.2
Description
The issue allows remote authenticated attackers to bypass access restrictions, enabling them to delete other operational administrators' MultiReport filters.
Recommendations
For versions 3.0.0 through 4.2.2, consider restricting access to the MultiReport filter management functionality until a patch is available. As a temporary workaround, limit the privileges of operational administrators to prevent unauthorized deletion of MultiReport filters.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾