← Back

CVE-2014-1989

nvd nist
Published: May 2, 2014Modified: May 6, 2026

JSON object

Loading...
6.0
Vector
AV:N/AC:M/Au:S/C:P/I:P/A:P
Exploitability: 6.8 / Impact: 6.4
Source: NVD

Description

Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls.

Affected (20)

Products: Cybozu: Garoon
1 product
Garoon
Configuration A
20 vulnerable
Vulnerable SoftwareAffected Versions
Cybozu
Version 3.0.0
Version 3.0.1
Version 3.0.2
Version 3.0.3
Version 3.1.0
Version 3.1.1
Version 3.1.2
Version 3.1.3
Version 3.5.0
Version 3.5.1
Version 3.5.2
Version 3.5.3
Version 3.5.4
Version 3.5.5
Version 3.7.0
Version 3.7.1
Version 3.7.2
Version 3.7 sp1
Version 3.7 sp2
Version 3.7 sp3

Related CWEs

References (6)

Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.