CVE-2021-20624: Medium severity cybozu office vulnerability
Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Scheduler via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-20624?
CVE-2021-20624 is an improper access control vulnerability in the Scheduler of Cybozu Office 10.0.0 to 10.8.4.
How does CVE-2021-20624 affect Cybozu Office?
CVE-2021-20624 allows an authenticated attacker to bypass access restrictions and alter the data of Scheduler in Cybozu Office.
What is the severity of CVE-2021-20624?
CVE-2021-20624 has a severity rating of medium.
How can an authenticated attacker exploit CVE-2021-20624?
An authenticated attacker can exploit CVE-2021-20624 by using unspecified vectors to bypass access restrictions and alter the data of Scheduler in Cybozu Office.
How can I fix CVE-2021-20624 in Cybozu Office?
To fix CVE-2021-20624 in Cybozu Office, it is recommended to update to a version between 10.0.0 and 10.8.4, as this vulnerability has been patched in those versions.