CVE-2021-20624

2021-03-1800:55:56

jpcert

www.cve.org

access control

cybozu office

scheduler

vulnerability

unspecified vectors

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Scheduler via unspecified vectors.

CNA Affected

[
  {
    "product": "Cybozu Office",
    "vendor": "Cybozu, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0 to 10.8.4"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN45797538/index.html

kb.cybozu.support/article/36866/