exploitDog

CVE-2021-20624

Опубликовано: 18 мар. 2021

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Scheduler via unspecified vectors.

Ссылки

https://jvn.jp/en/jp/JVN45797538/index.html
Third Party Advisory
https://kb.cybozu.support/article/36866/
Vendor Advisory
https://jvn.jp/en/jp/JVN45797538/index.html
Third Party Advisory
https://kb.cybozu.support/article/36866/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cybozu:office:*:*:*:*:*:*:*:*

Версия от 10.0.0 (включая) до 10.8.4 (включая)

EPSS

Процентиль: 46%

0.00232

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-vcgm-w445-jvmq

CVSS3: 6.5

github

больше 3 лет назад

Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Scheduler via unspecified vectors.

EPSS

Процентиль: 46%

0.00232

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-Other