Unscored CVE-2016-4872 EUVD-2016-5852GHSA-r67p-jhrc-vfpx

Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restrictions to view the names of unauthorized project…

Published Apr 17, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restrictions to view the names of unauthorized projects via a breadcrumb trail.

References

https://support.cybozu.com/ja-jp/article/9424
JVNDB-2016-000188 third-party-advisory
93461 vdb-entry
JVN#07148816 third-party-advisory