CVSS: 4.0EPSS: 0%CPEs: 27EXPL: 0CVE-2014-1993
https://notcve.org/view.php?id=CVE-2014-1993
The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended access restrictions via unspecified vectors. El subsistema Portlets en Cybozu Garoon 2.x y 3.x anterior a 3.7 SP4 permite a usuarios remotos autenticados evadir las restricciones de acceso a través de vectores no especificados. • http://cs.cybozu.co.jp/information/gr20140714up04.php http://jvn.jp/en/jp/JVN75990997/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2014-000077 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 3.5EPSS: 0%CPEs: 29EXPL: 0CVE-2014-1988
https://notcve.org/view.php?id=CVE-2014-1988
The Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors. La funcionalidad Phone Messages en Cybozu Garoon 2.0.0 hasta 3.7 SP2 permite a usuarios remotos autenticados causar una denegación de servicio (consumo de recursos) a través de vectores no especificados. • http://jvn.jp/en/jp/JVN90519014/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2014-000042 https://support.cybozu.com/ja-jp/article/8105 •
CVSS: 6.0EPSS: 0%CPEs: 20EXPL: 0CVE-2014-1989
https://notcve.org/view.php?id=CVE-2014-1989
Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls. Cybozu Garoon 3.0 hasta 3.7 SP3 permite a usuarios remotos autenticados evadir restricciones de acceso y eliminar información de planificación a través de llamadas API no especificadas. • http://jvn.jp/en/jp/JVN31230946/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2014-000043 https://support.cybozu.com/ja/article/5264 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 4.9EPSS: 0%CPEs: 50EXPL: 0CVE-2014-0817
https://notcve.org/view.php?id=CVE-2014-0817
Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 does not properly manage sessions, which allows remote authenticated users to impersonate arbitrary users via unspecified vectors. Cybozu Garoon 2.x hasta 2.5.4 y 3.x hasta 3.7 SP3 no maneja debidamente las sesiones, lo que permite a usuarios remotos autenticados suplantar usuarios arbitrarios a través de vectores no especificados. • http://cs.cybozu.co.jp/information/gr20140225up03.php http://jvn.jp/en/jp/JVN24035499/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2014-000021 https://support.cybozu.com/ja-jp/article/7992 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 4.0EPSS: 0%CPEs: 50EXPL: 0CVE-2014-0820
https://notcve.org/view.php?id=CVE-2014-0820
Directory traversal vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to read arbitrary files via unspecified vectors. Vulnerabilidad de salto de directorio en la funcionalidad de descarga en Cybozu Garoon 2.x hasta 2.5.4 y 3.x hasta 3.7 SP3 permite a usuarios remotos autenticados leer archivos arbitrarios a través de vectores no especificados. • http://cs.cybozu.co.jp/information/gr20140225up05.php http://jvn.jp/en/jp/JVN26393529/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2014-000023 http://www.securityfocus.com/bid/65815 https://support.cybozu.com/ja-jp/article/7994 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •