PT-2017-11560
CVE-2017-10857
·
Published
2017-10-12
·
Updated
2019-10-03
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Cybozu Office versions 10.0.0 through 10.6.1
Description
The issue allows authenticated attackers to bypass access restrictions and perform arbitrary actions through the "Cabinet" function.
Recommendations
For Cybozu Office versions 10.0.0 through 10.6.1, consider restricting access to the "Cabinet" function until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾