CVE-2014-1996

2014-07-2010:00:00

jpcert

www.cve.org

AI Score

7.5

Confidence

High

EPSS

0.003

Percentile

70.5%

JSON

Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial of service, via an API call.

References

cs.cybozu.co.jp/information/gr20140714up01.php

jvn.jp/en/jp/JVN31082531/index.html

jvndb.jvn.jp/jvndb/JVNDB-2014-000074