← Back

CVE-2014-1993

nvd nist
Published: Jul 20, 2014Modified: May 6, 2026

JSON object

Loading...
4.0
Vector
AV:N/AC:L/Au:S/C:N/I:P/A:N
Exploitability: 8.0 / Impact: 2.9
Source: NVD

Description

The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended access restrictions via unspecified vectors.

Affected (27)

Products: Cybozu: Garoon
1 product
Garoon
Configuration A
27 vulnerable
Vulnerable SoftwareAffected Versions
Cybozu
Version 2.0.0
Version 2.1.0
Version 2.1.1
Version 2.1.2
Version 2.1.3
Version 2.5.0
Version 2.5.1
Version 2.5.2
Version 2.5.3
Version 2.5.4
Version 3.0.0
Version 3.0.1
Version 3.0.2
Version 3.0.3
Version 3.1.0
Version 3.1.1
Version 3.1.2
Version 3.1.3
Version 3.5.0
Version 3.5.1
Version 3.5.2
Version 3.5.3
Version 3.5.4
Version 3.5.5
Version 3.7 sp1
Version 3.7 sp2
Version 3.7 sp3

Related CWEs

References (6)

Source: vultures@jpcert.or.jp
Vendor Advisory
Source: vultures@jpcert.or.jp
Vendor Advisory
Source: vultures@jpcert.or.jp
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.