CVE-2016-1191: Path Traversal
Published Jun 19, 2016
·Updated
Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify settings via unspecified vectors.
Affected Software
25 affected components
Cybozu Garoon=3.0.0
Cybozu Garoon=3.0.1
Cybozu Garoon=3.0.2
Cybozu Garoon=3.0.3
Cybozu Garoon=3.1.0
Cybozu Garoon=3.1.1
Cybozu Garoon=3.1.2
Cybozu Garoon=3.1.3
Cybozu Garoon=3.5.0
Cybozu Garoon=3.5.1
Cybozu Garoon=3.5.2
Cybozu Garoon=3.5.3
Cybozu Garoon=3.5.4
Cybozu Garoon=3.5.5
Cybozu Garoon=3.7.0
Cybozu Garoon=3.7.1
Cybozu Garoon=3.7.2
Cybozu Garoon=3.7.3
Cybozu Garoon=3.7.4
Cybozu Garoon=3.7.5
Cybozu Garoon=4.0.0
Cybozu Garoon=4.0.1
Cybozu Garoon=4.0.2
Cybozu Garoon=4.0.3
Cybozu Garoon=4.2.0
Remediation
Event History
Jun 19, 2016
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1191?
CVE-2016-1191 is categorized as a high severity vulnerability due to its potential to allow remote attackers to modify settings.
2
How do I fix CVE-2016-1191?
To fix CVE-2016-1191, upgrade to Cybozu Garoon version 4.2.1 or later.
3
What type of vulnerability is CVE-2016-1191?
CVE-2016-1191 is a directory traversal vulnerability found in the Files function of Cybozu Garoon.
4
Which versions of Cybozu Garoon are affected by CVE-2016-1191?
CVE-2016-1191 affects Cybozu Garoon versions prior to 4.2.1, including versions 3.x up to 4.0.3.
5
Can CVE-2016-1191 be exploited remotely?
Yes, CVE-2016-1191 can be exploited remotely by attackers to manipulate settings.