← Back

CVE-2017-10857

nvd nist
Published: Oct 12, 2017Modified: May 13, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function.

Affected (11)

Products: Cybozu: Office
Cybozu
1 product
Office
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Cybozu
Office
Version 10.0.0
Office
Version 10.0.1
Office
Version 10.0.2
Office
Version 10.1.0
Office
Version 10.1.2
Office
Version 10.2.0
Office
Version 10.3.0
Office
Version 10.4.0
Office
Version 10.5.0
Office
Version 10.6.0
Office
Version 10.6.1

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (4)

Source: vultures@jpcert.or.jp
Third Party AdvisoryVDB Entry
Source: vultures@jpcert.or.jp
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.