CVE-2017-2115: Medium severity cybozu office vulnerability
Published Apr 28, 2017
·Updated
Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to obtain "customapp" information via unspecified vectors.
Affected Software
9 affected components
Cybozu Office=10.0.0
Cybozu Office=10.0.1
Cybozu Office=10.0.2
Cybozu Office=10.1.0
Cybozu Office=10.1.2
Cybozu Office=10.2.0
Cybozu Office=10.3.0
Cybozu Office=10.4.0
Cybozu Office=10.5.0
Event History
Apr 28, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-2115?
CVE-2017-2115 is considered a moderate severity vulnerability due to the ability of authenticated attackers to bypass access restrictions.
2
How do I fix CVE-2017-2115?
To mitigate CVE-2017-2115, upgrade Cybozu Office to version 10.5.1 or later, as patches have been released to address this vulnerability.
3
Who is affected by CVE-2017-2115?
CVE-2017-2115 affects all versions of Cybozu Office from 10.0.0 to 10.5.0.
4
What type of vulnerability is CVE-2017-2115?
CVE-2017-2115 is classified as an access control vulnerability.
5
Can CVE-2017-2115 be exploited remotely?
Yes, CVE-2017-2115 can be exploited by remote authenticated attackers.