CVE-2014-1993: Medium severity cybozu garoon vulnerability
Published Jul 20, 2014
·Updated
The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended access restrictions via unspecified vectors.
Affected Software
27 affected components
Cybozu Garoon=2.0.0
Cybozu Garoon=2.1.0
Cybozu Garoon=2.1.1
Cybozu Garoon=2.1.2
Cybozu Garoon=2.1.3
Cybozu Garoon=2.5.0
Cybozu Garoon=2.5.1
Cybozu Garoon=2.5.2
Cybozu Garoon=2.5.3
Cybozu Garoon=2.5.4
Cybozu Garoon=3.0.0
Cybozu Garoon=3.0.1
Cybozu Garoon=3.0.2
Cybozu Garoon=3.0.3
Cybozu Garoon=3.1.0
Cybozu Garoon=3.1.1
Cybozu Garoon=3.1.2
Cybozu Garoon=3.1.3
Cybozu Garoon=3.5.0
Cybozu Garoon=3.5.1
Cybozu Garoon=3.5.2
Cybozu Garoon=3.5.3
Cybozu Garoon=3.5.4
Cybozu Garoon=3.5.5
Cybozu Garoon=3.7-sp1
Cybozu Garoon=3.7-sp2
Cybozu Garoon=3.7-sp3
Event History
Jul 20, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-1993?
CVE-2014-1993 is classified as a medium severity vulnerability.
2
How do I fix CVE-2014-1993?
To fix CVE-2014-1993, update to Cybozu Garoon version 3.7 SP4 or later.
3
What impact does CVE-2014-1993 have on affected systems?
CVE-2014-1993 allows remote authenticated users to bypass intended access restrictions, potentially leading to unauthorized access.
4
Which versions of Cybozu Garoon are affected by CVE-2014-1993?
CVE-2014-1993 affects Cybozu Garoon versions 2.x and 3.x prior to 3.7 SP4.
5
Who can exploit the CVE-2014-1993 vulnerability?
CVE-2014-1993 can be exploited by remote authenticated users with knowledge of unspecified vectors.