PT-2019-9243 · Cybozu · Cybozu Garoon
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Cybozu Garoon versions 3.0.0 through 4.10.0
Description
The issue allows remote attackers to bypass access restrictions and view information that is only available to signed-on users through the Single sign-on function.
Recommendations
For Cybozu Garoon versions 3.0.0 through 4.10.0, consider restricting access to the Single sign-on function until a patch is available.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Cybozu Garoon