Unscored CVE-2014-1996 EUVD-2014-2048GHSA-92hc-f3ff-7hwj

Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause …

Published Jul 20, 2014 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial of service, via an API call.

References

JVNDB-2014-000074 third-party-advisory
JVN#31082531 third-party-advisory
http://cs.cybozu.co.jp/information/gr20140714up01.php