VulnerabilityModified
CVE-2011-2677
Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time card and attendance) via unspecified vectors related to manipulation of a URL.
MEDIUM 5.5EPSS 1.19%
Does this matter?
Lower severity and a low EPSS score (1.19%). Track it; it rarely justifies an emergency change on its own.
Description
Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time card and attendance) via unspecified vectors related to manipulation of a URL.
- CVSS 2.0
- 5.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:N
- EPSS
- 1.19% probability · 66th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- cybozu/office
- Source
- vultures@jpcert.or.jp
References
- http://cs.cybozu.co.jp/information/20111005notice01.php
- http://jvn.jp/en/jp/JVN84838479/index.html
- http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000079.html
- http://osvdb.org/76124
- http://secunia.com/advisories/46321Vendor Advisory
- http://www.securityfocus.com/bid/50015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70411
- http://cs.cybozu.co.jp/information/20111005notice01.php
- http://jvn.jp/en/jp/JVN84838479/index.html
- http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000079.html
- http://osvdb.org/76124
- http://secunia.com/advisories/46321Vendor Advisory
- http://www.securityfocus.com/bid/50015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70411
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.