CVE-2016-1191

Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify settings via unspecified vectors.

Score

CVSS 3.0 5.3 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2016-06-19

Last modified

2024-08-05

Weaknesses

CWE-22

Affected products

• Garoon (Cybozu)

References

• http://jvn.jp/en/jp/JVN14749391/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000078
• https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03