Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function.
2017-10-12T14:29:00.217
2025-04-20T01:37:25.860
Deferred
CVSSv3.0: 4.3 (MEDIUM)
AV:N/AC:L/Au:S/C:N/I:P/A:N
8.0
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | cybozu | office | 10.0.0 | Yes |
| Application | cybozu | office | 10.0.1 | Yes |
| Application | cybozu | office | 10.0.2 | Yes |
| Application | cybozu | office | 10.1.0 | Yes |
| Application | cybozu | office | 10.1.2 | Yes |
| Application | cybozu | office | 10.2.0 | Yes |
| Application | cybozu | office | 10.3.0 | Yes |
| Application | cybozu | office | 10.4.0 | Yes |
| Application | cybozu | office | 10.5.0 | Yes |
| Application | cybozu | office | 10.6.0 | Yes |
| Application | cybozu | office | 10.6.1 | Yes |