CVE-2019-5991: SQL Injection
Published Sep 12, 2019
·Updated
SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
1 affected component
Cybozu Garoon>=4.0.0<=4.10.3
Event History
Sep 12, 2019
CVE Published
via MITRE·03:58 PM
Data Sourced
via MITRE·03:58 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-5991?
CVE-2019-5991 has been classified as a high severity vulnerability due to its potential for remote authenticated attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2019-5991?
To fix CVE-2019-5991, you should upgrade Cybozu Garoon to the latest version beyond 4.10.3.
3
Which versions of Cybozu Garoon are affected by CVE-2019-5991?
CVE-2019-5991 affects Cybozu Garoon versions from 4.0.0 to 4.10.3.
4
What type of vulnerability is CVE-2019-5991?
CVE-2019-5991 is an SQL injection vulnerability.
5
Can unprivileged users exploit CVE-2019-5991?
CVE-2019-5991 requires remote authenticated access to exploit, limiting the potential attack vector to logged-in users.