CVE-2016-7802: Path Traversal
Published Jun 9, 2017
·Updated
Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vectors.
Affected Software
27 affected components
Cybozu Garoon=3.0.0
Cybozu Garoon=3.0.1
Cybozu Garoon=3.0.2
Cybozu Garoon=3.0.3
Cybozu Garoon=3.1.0
Cybozu Garoon=3.1.1
Cybozu Garoon=3.1.2
Cybozu Garoon=3.1.3
Cybozu Garoon=3.5.0
Cybozu Garoon=3.5.1
Cybozu Garoon=3.5.2
Cybozu Garoon=3.5.3
Cybozu Garoon=3.5.4
Cybozu Garoon=3.5.5
Cybozu Garoon=3.7.0
Cybozu Garoon=3.7.1
Cybozu Garoon=3.7.2
Cybozu Garoon=3.7.3
Cybozu Garoon=3.7.4
Cybozu Garoon=3.7.5
Cybozu Garoon=4.0.0
Cybozu Garoon=4.0.1
Cybozu Garoon=4.0.2
Cybozu Garoon=4.0.3
Cybozu Garoon=4.2.0
Cybozu Garoon=4.2.1
Cybozu Garoon=4.2.2
Event History
Jun 9, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-7802?
CVE-2016-7802 is considered a high severity vulnerability due to its potential for unauthorized file access.
2
How do I fix CVE-2016-7802?
To fix CVE-2016-7802, you should upgrade to a version of Cybozu Garoon that is not affected, specifically versions 4.2.3 or later.
3
What systems are affected by CVE-2016-7802?
CVE-2016-7802 affects Cybozu Garoon versions 3.0.0 to 4.2.2.
4
What type of vulnerability is CVE-2016-7802?
CVE-2016-7802 is a directory traversal vulnerability that allows unauthorized access to arbitrary files.
5
Can CVE-2016-7802 be exploited remotely?
Yes, CVE-2016-7802 can be exploited by remote authenticated attackers.