Vulnerability Description
Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of the Standard database via unspecified vectors.
CVSS Score
2.7
LOW
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cybozu | Garoon | >= 3.0.0, <= 4.2.6 |
Related Weaknesses (CWE)
References
- http://jvn.jp/en/jp/JVN65268217/index.htmlThird Party AdvisoryVDB Entry
- https://support.cybozu.com/ja-jp/article/9378Vendor Advisory
- http://jvn.jp/en/jp/JVN65268217/index.htmlThird Party AdvisoryVDB Entry
- https://support.cybozu.com/ja-jp/article/9378Vendor Advisory
FAQ
What is CVE-2018-0532?
CVE-2018-0532 is a vulnerability with a CVSS score of 2.7 (LOW). Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of the Standard database via unspecified vectors.
How severe is CVE-2018-0532?
CVE-2018-0532 has been rated LOW with a CVSS base score of 2.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-0532?
Check the references section above for vendor advisories and patch information. Affected products include: Cybozu Garoon.