CVE-2015-8485: Medium severity cybozu office vulnerability
Published Feb 17, 2016
·Updated
Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary posting titles via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8486, and CVE-2016-1152.
Affected Software
8 affected components
Cybozu Office=9.9.0
Cybozu Office=10.0.0
Cybozu Office=10.0.1
Cybozu Office=10.0.2
Cybozu Office=10.1.0
Cybozu Office=10.1.2
Cybozu Office=10.2.0
Cybozu Office=10.3.0
Event History
Feb 17, 2016
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8485?
CVE-2015-8485 has a medium severity rating as it allows authenticated users to bypass access restrictions.
2
How do I fix CVE-2015-8485?
To fix CVE-2015-8485, upgrade to a version of Cybozu Office later than 10.3.0.
3
What versions of Cybozu Office are affected by CVE-2015-8485?
CVE-2015-8485 affects Cybozu Office versions 9.9.0 to 10.3.0.
4
What type of vulnerability is CVE-2015-8485?
CVE-2015-8485 is a security vulnerability that allows unauthorized access to posting titles.
5
Can CVE-2015-8485 be exploited remotely?
Yes, CVE-2015-8485 can be exploited by remote authenticated users.