CVE-2015-8484: Medium severity cybozu office vulnerability

Published Feb 17, 2016

Updated

Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended calendar-viewing restrictions via unspecified vectors, a different vulnerability than CVE-2015-8485, CVE-2015-8486, and CVE-2016-1152.

Affected Software

8 affected components

Cybozu Office=9.9.0

Cybozu Office=10.0.0

Cybozu Office=10.0.1

Cybozu Office=10.0.2

Cybozu Office=10.1.0

Cybozu Office=10.1.2

Cybozu Office=10.2.0

Cybozu Office=10.3.0

Event History

Feb 17, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-8484?

CVE-2015-8484 is considered to have a moderate severity level as it allows authenticated users to bypass calendar-viewing restrictions.

How do I fix CVE-2015-8484?

To fix CVE-2015-8484, it is recommended to upgrade to a version of Cybozu Office that is not affected by this vulnerability.

Who is affected by CVE-2015-8484?

CVE-2015-8484 affects users of Cybozu Office versions 9.9.0 through 10.3.0.

What type of attack does CVE-2015-8484 enable?

CVE-2015-8484 enables authenticated users to access restricted calendar views, potentially compromising private scheduling information.

Is CVE-2015-8484 related to other vulnerabilities?

CVE-2015-8484 is a different vulnerability than CVE-2015-8485, CVE-2015-8486, and CVE-2016-1152, though they may impact similar functionalities.