Lucene search

[email protected]NVD:CVE-2014-1996

HistoryJul 20, 2014 - 11:12 a.m.

CVE-2014-1996

2014-07-2011:12:49

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.003

Percentile

70.5%

JSON

Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial of service, via an API call.

Affected configurations

Nvd

Node

cybozugaroonMatch3.7sp1

cybozugaroonMatch3.7sp2

cybozugaroonMatch3.7sp3

cybozugaroonMatch3.7.0

VendorProductVersionCPE
cybozugaroon3.7cpe:2.3:a:cybozu:garoon:3.7:sp1:*:*:*:*:*:*
cybozugaroon3.7cpe:2.3:a:cybozu:garoon:3.7:sp2:*:*:*:*:*:*
cybozugaroon3.7cpe:2.3:a:cybozu:garoon:3.7:sp3:*:*:*:*:*:*
cybozugaroon3.7.0cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cybozu	garoon	3.7	cpe:2.3:a:cybozu:garoon:3.7:sp1::::::
cybozu	garoon	3.7	cpe:2.3:a:cybozu:garoon:3.7:sp2::::::
cybozu	garoon	3.7	cpe:2.3:a:cybozu:garoon:3.7:sp3::::::
cybozu	garoon	3.7.0	cpe:2.3:a:cybozu:garoon:3.7.0:::::::*

References

cs.cybozu.co.jp/information/gr20140714up01.php

jvn.jp/en/jp/JVN31082531/index.html

jvndb.jvn.jp/jvndb/JVNDB-2014-000074

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.003

Percentile

70.5%

JSON

Related for NVD:CVE-2014-1996

cvelist1 prion1 jvn1 cve1