CVE-2016-1152: Medium severity cybozu office vulnerability
Published Feb 17, 2016
·Updated
Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions, and read or write to plan data, via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8485, and CVE-2015-8486.
Affected Software
8 affected components
Cybozu Office=9.9.0
Cybozu Office=10.0.0
Cybozu Office=10.0.1
Cybozu Office=10.0.2
Cybozu Office=10.1.0
Cybozu Office=10.1.2
Cybozu Office=10.2.0
Cybozu Office=10.3.0
Event History
Feb 17, 2016
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1152?
CVE-2016-1152 is considered to have a medium severity level, as it allows unauthorized access to sensitive plan data.
2
How do I fix CVE-2016-1152?
To fix CVE-2016-1152, upgrade Cybozu Office to a version later than 10.3.0 or apply any available security patches.
3
What are the affected versions in CVE-2016-1152?
CVE-2016-1152 affects Cybozu Office versions 9.9.0 to 10.3.0.
4
Can CVE-2016-1152 be exploited remotely?
Yes, CVE-2016-1152 can be exploited by remote authenticated users.
5
What functionalities are affected by CVE-2016-1152?
CVE-2016-1152 allows remote authenticated users to read or write to plan data, bypassing access restrictions.