Vulnerabilities > Cybozu > Garoon > 5.0.1

DATE CVE VULNERABILITY TITLE RISK
2020-06-30 CVE-2020-5583 Information Exposure vulnerability in Cybozu Garoon
Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors.
network
low complexity
cybozu CWE-200
4.0
2020-06-30 CVE-2020-5582 Incorrect Authorization vulnerability in Cybozu Garoon
Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to Report via unspecified vectors.
network
low complexity
cybozu CWE-863
4.0
2020-06-30 CVE-2020-5581 Path Traversal vulnerability in Cybozu Garoon
Path traversal vulnerability in Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to obtain unintended information via unspecified vectors.
network
low complexity
cybozu CWE-22
4.0
2020-06-30 CVE-2020-5580 Improper Privilege Management vulnerability in Cybozu Garoon
Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to view and/or alter Single sign-on settings via unspecified vectors.
network
low complexity
cybozu CWE-269
5.5