CVE-2014-1989: Medium severity Cybozu Garoon vulnerability
Published May 2, 2014
·Updated
Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls.
Affected Software
20 affected components
Cybozu Garoon=3.0.0
Cybozu Garoon=3.0.1
Cybozu Garoon=3.0.2
Cybozu Garoon=3.0.3
Cybozu Garoon=3.1.0
Cybozu Garoon=3.1.1
Cybozu Garoon=3.1.2
Cybozu Garoon=3.1.3
Cybozu Garoon=3.5.0
Cybozu Garoon=3.5.1
Cybozu Garoon=3.5.2
Cybozu Garoon=3.5.3
Cybozu Garoon=3.5.4
Cybozu Garoon=3.5.5
Cybozu Garoon=3.7-sp1
Cybozu Garoon=3.7-sp2
Cybozu Garoon=3.7-sp3
Cybozu Garoon=3.7.0
Cybozu Garoon=3.7.1
Cybozu Garoon=3.7.2
Event History
May 2, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:55 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-1989?
CVE-2014-1989 is considered to have a medium severity due to its ability for remote authenticated users to manipulate scheduled information.
2
How do I fix CVE-2014-1989?
To fix CVE-2014-1989, it is recommended to upgrade to the latest version of Cybozu Garoon that addresses this vulnerability.
3
Which Cybozu Garoon versions are affected by CVE-2014-1989?
CVE-2014-1989 affects Cybozu Garoon versions from 3.0 through 3.7 SP3.
4
What impact does CVE-2014-1989 have on my system?
CVE-2014-1989 allows remote authenticated users to bypass access restrictions, leading to unauthorized deletion of schedule information.
5
Is CVE-2014-1989 exploitable remotely?
Yes, CVE-2014-1989 can be exploited remotely by authenticated users.