CVE-2017-2094
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors.
- Score
- CVSS 3.0 4.3 Medium
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2017-04-28
- Last modified
- 2024-08-05
- Weaknesses
- CWE-269
Affected products
References
- http://jvn.jp/en/jp/JVN73182875/index.html
- http://www.securityfocus.com/bid/96429
- https://support.cybozu.com/ja-jp/article/9655
