Unscored CVE-2015-8486 EUVD-2015-8367GHSA-r9cp-gq25-57mw

Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary report title…

Published Feb 17, 2016 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary report titles via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8485, and CVE-2016-1152.

References

JVNDB-2016-000023 third-party-advisory
JVN#48720230 third-party-advisory
https://cs.cybozu.co.jp/2015/006074.html