Vulnerability Description
Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.0. If this vulnerability is exploited, unintended data may be left in forwarded mail.
CVSS Score
6.5
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cybozu | Garoon | >= 5.5.0, < 6.0.0 |
Related Weaknesses (CWE)
References
- https://cs.cybozu.co.jp/2024/007901.htmlVendor Advisory
- https://jvn.jp/en/jp/JVN28869536/Third Party Advisory
- https://cs.cybozu.co.jp/2024/007901.htmlVendor Advisory
- https://jvn.jp/en/jp/JVN28869536/Third Party Advisory
FAQ
What is CVE-2024-31400?
CVE-2024-31400 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.0. If this vulnerability is exploited, unintended data may be left in forwarded mail.
How severe is CVE-2024-31400?
CVE-2024-31400 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-31400?
Check the references section above for vendor advisories and patch information. Affected products include: Cybozu Garoon.