Описание
Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a log file via unspecified vectors.
Ссылки
- Vendor Advisory
- Vendor Advisory
- PatchVendor Advisory
- Vendor Advisory
- Vendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00296
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 4.3
github
больше 3 лет назад
Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a log file via unspecified vectors.
EPSS
Процентиль: 53%
0.00296
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22