JVN#90519014: Cybozu Garoon Phone Messages vulnerable to denial-of-service (DoS)

Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains a denial-of-service (DoS) vulnerability in the Phone Messages function.

Impact

Processing input from a user who can log in to the system may cause denial-of-service (DoS) condition on the server by consuming high system resources.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• Cybozu Garoon 3.7.0 to 3.7 Service Pack 2