CVE-2019-5934: SQL Injection
Published May 17, 2019
·Updated
SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands via the Log Search function of application 'logging'.
Affected Software
1 affected component
Cybozu Garoon>=4.0.0<=4.10.0
Event History
May 17, 2019
CVE Published
via MITRE·03:25 PM
Data Sourced
via MITRE·03:25 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-5934?
CVE-2019-5934 has a high severity rating due to its potential to allow administrative access to execute arbitrary SQL commands.
2
How do I fix CVE-2019-5934?
To fix CVE-2019-5934, upgrade Cybozu Garoon to a version newer than 4.10.0.
3
Who is affected by CVE-2019-5934?
CVE-2019-5934 affects users of Cybozu Garoon versions 4.0.0 to 4.10.0 with administrator rights.
4
What can an attacker do with CVE-2019-5934?
An attacker with administrator rights can execute arbitrary SQL commands affecting the application's database.
5
When was CVE-2019-5934 disclosed?
CVE-2019-5934 was disclosed in early 2019.