PT-2019-9243

CVE-2018-16178

·

Published

2019-01-09

·

Updated

2020-08-24

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.10.0
Description The issue allows remote attackers to bypass access restrictions and view information that is only available to signed-on users through the Single sign-on function.
Recommendations For Cybozu Garoon versions 3.0.0 through 4.10.0, consider restricting access to the Single sign-on function until a patch is available.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2018-16178
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com