PT-2020-18538
CVE-2020-5563
·
Published
2020-04-28
·
Updated
2020-04-30
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Cybozu Garoon versions 4.0.0 through 4.10.3
Description
The issue is related to improper authentication, allowing remote attackers to obtain data in the affected product via the API.
Recommendations
For Cybozu Garoon versions 4.0.0 through 4.10.3, update to a version that includes a fix for the improper authentication issue.
As a temporary workaround, consider restricting access to the API to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾