Lucene search

JpcertCVE-2016-7833

HistoryJun 09, 2017 - 4:29 p.m.

CVE-2016-7833

2017-06-0916:29:01

CWE-284

jpcert

web.nvd.nist.gov

cybozu dezie

cve-2016-7833

access restrictions bypass

remote attack

dbm file

nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

60.9%

JSON

Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors.

Affected configurations

Nvd

Vulners

Node

cybozudezieMatch8.0.2

cybozudezieMatch8.0.3

cybozudezieMatch8.0.4

cybozudezieMatch8.0.5

cybozudezieMatch8.0.6

cybozudezieMatch8.0.7

cybozudezieMatch8.1.0

cybozudezieMatch8.1.1

VendorProductVersionCPE
cybozudezie8.0.2cpe:2.3:a:cybozu:dezie:8.0.2:*:*:*:*:*:*:*
cybozudezie8.0.3cpe:2.3:a:cybozu:dezie:8.0.3:*:*:*:*:*:*:*
cybozudezie8.0.4cpe:2.3:a:cybozu:dezie:8.0.4:*:*:*:*:*:*:*
cybozudezie8.0.5cpe:2.3:a:cybozu:dezie:8.0.5:*:*:*:*:*:*:*
cybozudezie8.0.6cpe:2.3:a:cybozu:dezie:8.0.6:*:*:*:*:*:*:*
cybozudezie8.0.7cpe:2.3:a:cybozu:dezie:8.0.7:*:*:*:*:*:*:*
cybozudezie8.1.0cpe:2.3:a:cybozu:dezie:8.1.0:*:*:*:*:*:*:*
cybozudezie8.1.1cpe:2.3:a:cybozu:dezie:8.1.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cybozu	dezie	8.0.2	cpe:2.3:a:cybozu:dezie:8.0.2:::::::*
cybozu	dezie	8.0.3	cpe:2.3:a:cybozu:dezie:8.0.3:::::::*
cybozu	dezie	8.0.4	cpe:2.3:a:cybozu:dezie:8.0.4:::::::*
cybozu	dezie	8.0.5	cpe:2.3:a:cybozu:dezie:8.0.5:::::::*
cybozu	dezie	8.0.6	cpe:2.3:a:cybozu:dezie:8.0.6:::::::*
cybozu	dezie	8.0.7	cpe:2.3:a:cybozu:dezie:8.0.7:::::::*
cybozu	dezie	8.1.0	cpe:2.3:a:cybozu:dezie:8.1.0:::::::*
cybozu	dezie	8.1.1	cpe:2.3:a:cybozu:dezie:8.1.1:::::::*

CNA Affected

[
  {
    "product": "Cybozu Dezie",
    "vendor": "Cybozu, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.0 to 8.1.1"
      }
    ]
  }
]

References

www.securityfocus.com/bid/94831

jvn.jp/en/jp/JVN16781735/index.html

support.cybozu.com/ja-jp/article/9741

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

60.9%

JSON

Related for CVE-2016-7833