Vulnerability in Cybozu Garoon

CVE-2014-1996

Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial of service, via an API call.

EPSS: 0.026 (84.0th percentile) — read the EPSS interpretation.

Affected products

Cybozu Garoon — versions 3.7, 3.7.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

vultures@jpcert.or.jp (x_refsource_JVNDB, Vendor Advisory, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_JVN, Vendor Advisory, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_CONFIRM, Vendor Advisory)