CVE-2011-2677

medium

Description

Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time card and attendance) via unspecified vectors related to manipulation of a URL.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/70411

http://www.securityfocus.com/bid/50015

http://secunia.com/advisories/46321

http://osvdb.org/76124

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000079.html

http://jvn.jp/en/jp/JVN84838479/index.html

http://cs.cybozu.co.jp/information/20111005notice01.php

Details

Source: Mitre, NVD

Published: 2011-10-21

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N