CVE-2018-0528

Cybozu Office 10.0.0 to 10.7.0 allows authenticated attackers to bypass authentication to view the schedules that are not permitted to access via unspecified vectors.

Score

CVSS 3.0 4.3 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2018-06-26

Last modified

2024-08-05

Weaknesses

CWE-200, CWE-287

Affected products

• Office (Cybozu)
• Cybozu Office (Cybozu Inc.)

References

• http://jvn.jp/en/jp/JVN51737843/index.html
• https://support.cybozu.com/ja-jp/article/9812