Lucene search

JpcertCVE-2023-27384

HistoryMay 23, 2023 - 2:15 a.m.

CVE-2023-27384

2023-05-2302:15:09

jpcert

web.nvd.nist.gov

cve-2023-27384

operation restriction bypass

cybozu garoon

vulnerability

nvd

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.4

Confidence

High

EPSS

0.001

Percentile

40.9%

JSON

Operation restriction bypass vulnerability in MultiReport of Cybozu Garoon 5.15.0 allows a remote authenticated attacker to alter the data of MultiReport.

Affected configurations

Nvd

Vulners

Node

cybozugaroonMatch5.15.0

VendorProductVersionCPE
cybozugaroon5.15.0cpe:2.3:a:cybozu:garoon:5.15.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cybozu	garoon	5.15.0	cpe:2.3:a:cybozu:garoon:5.15.0:::::::*

CNA Affected

[
  {
    "vendor": "Cybozu, Inc.",
    "product": "Cybozu Garoon",
    "versions": [
      {
        "version": "5.15.0",
        "status": "affected"
      }
    ]
  }
]

References

cs.cybozu.co.jp/2023/007698.html

jvn.jp/en/jp/JVN41694426/

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.4

Confidence

High

EPSS

0.001

Percentile

40.9%

JSON

Related for CVE-2023-27384