PT-2016-3914

CVE-2015-8489

·

Published

2016-02-17

·

Updated

2016-02-22

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cybozu Office versions 9.9.0 through 10.3.0
Description The issue allows remote authenticated users to cause a denial of service, specifically excessive database locking, by utilizing a crafted CSV file.
Recommendations For Cybozu Office versions 9.9.0 through 10.3.0, consider restricting access to the CSV file import feature until a patch is available to prevent excessive database locking.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
Related identifiers
CVE-2015-8489
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com