CVE-2022-29891: Medium severity cybozu office vulnerability
Published Aug 18, 2022
·Updated
Browse restriction bypass vulnerability in Custom Ap of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Custom App via unspecified vectors.
Affected Software
1 affected component
Cybozu Office>=10.0.0<=10.8.5
Event History
Aug 18, 2022
CVE Published
via MITRE·07:11 AM
Data Sourced
via MITRE·07:11 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this browse restriction bypass vulnerability?
The vulnerability ID for this browse restriction bypass vulnerability is CVE-2022-29891.
2
What is the severity level of CVE-2022-29891?
The severity level of CVE-2022-29891 is medium with a CVSS score of 4.3.
3
What is affected by CVE-2022-29891?
Cybozu Office versions 10.0.0 to 10.8.5 are affected by CVE-2022-29891.
4
How does CVE-2022-29891 work?
CVE-2022-29891 allows a remote authenticated attacker to bypass browse restrictions and obtain the data of a Custom App.
5
Are there any references for more information about CVE-2022-29891?
Yes, you can find more information about CVE-2022-29891 at the following references: [1](https://cs.cybozu.co.jp/2022/007584.html), [2](https://jvn.jp/en/jp/JVN20573662/index.html).