CVE-2017-2091

medium

Description

Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors.

References

Advisories
More

http://www.securityfocus.com/bid/96429

http://jvn.jp/en/jp/JVN73182875/index.html

https://support.cybozu.com/ja-jp/article/9570

Details

Source: Mitre, NVD

Published: 2017-04-28

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 4.3

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N