CVE-2016-4908: Medium severity cybozu garoon vulnerability
Published Jun 9, 2017
·Updated
Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete another user's private RSS settings via unspecified vectors.
Affected Software
27 affected components
Cybozu Garoon=3.0.0
Cybozu Garoon=3.0.1
Cybozu Garoon=3.0.2
Cybozu Garoon=3.0.3
Cybozu Garoon=3.1.0
Cybozu Garoon=3.1.1
Cybozu Garoon=3.1.2
Cybozu Garoon=3.1.3
Cybozu Garoon=3.5.0
Cybozu Garoon=3.5.1
Cybozu Garoon=3.5.2
Cybozu Garoon=3.5.3
Cybozu Garoon=3.5.4
Cybozu Garoon=3.5.5
Cybozu Garoon=3.7.0
Cybozu Garoon=3.7.1
Cybozu Garoon=3.7.2
Cybozu Garoon=3.7.3
Cybozu Garoon=3.7.4
Cybozu Garoon=3.7.5
Cybozu Garoon=4.0.0
Cybozu Garoon=4.0.1
Cybozu Garoon=4.0.2
Cybozu Garoon=4.0.3
Cybozu Garoon=4.2.0
Cybozu Garoon=4.2.1
Cybozu Garoon=4.2.2
Event History
Jun 9, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-4908?
CVE-2016-4908 is rated as a medium severity vulnerability.
2
How do I fix CVE-2016-4908?
To fix CVE-2016-4908, upgrade Cybozu Garoon to version 4.2.3 or later.
3
What versions of Cybozu Garoon are affected by CVE-2016-4908?
CVE-2016-4908 affects Cybozu Garoon versions from 3.0.0 to 4.2.2.
4
What type of attack does CVE-2016-4908 allow?
CVE-2016-4908 allows remote authenticated attackers to bypass access restrictions and alter or delete another user's private RSS settings.
5
Is authentication required to exploit CVE-2016-4908?
Yes, exploitation of CVE-2016-4908 requires the attacker to be authenticated.