CVE-2021-20625

2021-03-1800:55:57

jpcert

www.cve.org

vulnerability

access control

bulletin board

cybozu office

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Bulletin Board via unspecified vectors.

CNA Affected

[
  {
    "product": "Cybozu Office",
    "vendor": "Cybozu, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0 to 10.8.4"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN45797538/index.html

kb.cybozu.support/article/36874/