PT-2021-14257
CVE-2021-20803
·
Published
2021-10-13
·
Updated
2021-10-19
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions:
Cybozu Remote Service versions 3.1.8 through 3.1.9
Description:
The issue allows a remote authenticated attacker to bypass operation restrictions in the management screen, enabling them to alter the data of the management screen.
Recommendations:
For Cybozu Remote Service versions 3.1.8 through 3.1.9, consider restricting access to the management screen until a fix is available. As a temporary workaround, limit the privileges of authenticated users to prevent data alteration.
Found an issue in the description? Have something to add? Feel free to write us 👾