CVE-2017-2116: Medium severity cybozu office vulnerability
Published Apr 28, 2017
·Updated
Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to delete "customapp" templates via unspecified vectors.
Affected Software
9 affected components
Cybozu Office=10.0.0
Cybozu Office=10.0.1
Cybozu Office=10.0.2
Cybozu Office=10.1.0
Cybozu Office=10.1.2
Cybozu Office=10.2.0
Cybozu Office=10.3.0
Cybozu Office=10.4.0
Cybozu Office=10.5.0
Event History
Apr 28, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-2116?
CVE-2017-2116 is classified as a medium severity vulnerability.
2
How do I fix CVE-2017-2116?
To fix CVE-2017-2116, update Cybozu Office to a version later than 10.5.0.
3
What types of attacks does CVE-2017-2116 allow?
CVE-2017-2116 allows remote authenticated attackers to bypass access restrictions and delete 'customapp' templates.
4
Which versions of Cybozu Office are affected by CVE-2017-2116?
CVE-2017-2116 affects Cybozu Office versions from 10.0.0 to 10.5.0.
5
Who is impacted by CVE-2017-2116?
Users of Cybozu Office versions 10.0.0 to 10.5.0 with remote authenticated access are impacted by CVE-2017-2116.