CVE-2014-0820

2014-02-2701:00:00

jpcert

www.cve.org

AI Score

6.2

Confidence

Low

EPSS

0.002

Percentile

54.9%

JSON

Directory traversal vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to read arbitrary files via unspecified vectors.

References

cs.cybozu.co.jp/information/gr20140225up05.php

jvn.jp/en/jp/JVN26393529/index.html

jvndb.jvn.jp/jvndb/JVNDB-2014-000023

www.securityfocus.com/bid/65815

support.cybozu.com/ja-jp/article/7994