Lucene search

JpcertCVE-2023-27304

HistoryMay 23, 2023 - 2:15 a.m.

CVE-2023-27304

2023-05-2302:15:09

jpcert

web.nvd.nist.gov

cybozu

garoon

cve-2023-27304

message

bulletin

operation restriction bypass

vulnerability

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.4

Confidence

High

EPSS

0.001

Percentile

40.9%

JSON

Operation restriction bypass vulnerability in Message and Bulletin of Cybozu Garoon 4.6.0 to 5.9.2 allows a remote authenticated attacker to alter the data of Message and/or Bulletin.

Affected configurations

Nvd

Vulners

Node

cybozugaroonRange4.6.0–5.9.2

VendorProductVersionCPE
cybozugaroon*cpe:2.3:a:cybozu:garoon:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cybozu	garoon	*	cpe:2.3:a:cybozu:garoon::::::::

CNA Affected

[
  {
    "vendor": "Cybozu, Inc.",
    "product": "Cybozu Garoon",
    "versions": [
      {
        "version": "4.6.0 to 5.9.2",
        "status": "affected"
      }
    ]
  }
]

References

cs.cybozu.co.jp/2023/007698.html

jvn.jp/en/jp/JVN41694426/

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.4

Confidence

High

EPSS

0.001

Percentile

40.9%

JSON

Related for CVE-2023-27304