CVE-2019-5943
First published: Fri May 17 2019(Updated: )
Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to view the information without view privileges via the application 'Bulletin' and the application 'Cabinet'.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cybozu Garoon | >=4.0.0<=4.10.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID for this security issue is CVE-2019-5943.
What is the severity level of CVE-2019-5943?
The severity level of CVE-2019-5943 is medium with a score of 4.3.
Which versions of Cybozu Garoon are affected by CVE-2019-5943?
CVE-2019-5943 affects Cybozu Garoon versions 4.0.0 to 4.10.1.
How can remote authenticated attackers exploit CVE-2019-5943?
Remote authenticated attackers can exploit CVE-2019-5943 by bypassing access restrictions to view information without view privileges through the 'Bulletin' and 'Cabinet' applications.
Where can I find more information about CVE-2019-5943?
You can find more information about CVE-2019-5943 at the following references: [http://jvn.jp/en/jp/JVN58849431/index.html](http://jvn.jp/en/jp/JVN58849431/index.html) and [https://kb.cybozu.support/article/35486/](https://kb.cybozu.support/article/35486/).
- collector/nvd-index
- agent/references
- agent/author
- agent/severity
- agent/type
- agent/tags
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/cybozu
- canonical/cybozu garoon
- version/cybozu garoon/4.0.0
- version/cybozu garoon/4.10.1