First published: Thu Aug 18 2022(Updated: )
Operation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Project via unspecified vectors.
Credit: vultures@jpcert.or.jp vultures@jpcert.or.jp
Affected Software | Affected Version | How to fix |
---|---|---|
Cybozu Office | >=10.0.0<=10.8.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-32544 is an operation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5 that allows a remote authenticated attacker to alter the data of Project via unspecified vectors.
CVE-2022-32544 allows a remote authenticated attacker to bypass operation restrictions and modify the data of Project in Cybozu Office versions 10.0.0 to 10.8.5.
CVE-2022-32544 has a severity rating of 4.3 (medium).
To fix CVE-2022-32544, it is recommended to update Cybozu Office to a version later than 10.8.5.
More information about CVE-2022-32544 can be found at the following references: [Reference 1](https://cs.cybozu.co.jp/2022/007584.html) and [Reference 2](https://jvn.jp/en/jp/JVN20573662/index.html).