PT-2020-18538
CVE-2020-5563
·
تاريخ النشر
2020-04-28
·
تاريخ التحديث
2020-04-30
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Cybozu Garoon versions 4.0.0 through 4.10.3
Description
The issue is related to improper authentication, allowing remote attackers to obtain data in the affected product via the API.
Recommendations
For Cybozu Garoon versions 4.0.0 through 4.10.3, update to a version that includes a fix for the improper authentication issue.
As a temporary workaround, consider restricting access to the API to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾