1. CVE-Search
  2. CVE-2017-2116
ID CVE-2017-2116
Summary Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to delete "customapp" templates via unspecified vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cybozu:office:10.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:cybozu:office:10.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cybozu:office:10.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:cybozu:office:10.5.0:*:*:*:*:*:*:*
CVSS
Base: 4.0 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:S/C:N/I:P/A:N
refmap via4
bid 97717
jvn JVN#17535578
misc https://support.cybozu.com/ja-jp/article/9736
Last major update 24-08-2020 - 17:37
Published 28-04-2017 - 16:59
Last modified 24-08-2020 - 17:37
Back to Top