CVE-2019-6023 Vulnerability Details

  /     /     /  

CVE-2019-6023 Metadata Quick Info

CVE Published: 26/12/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: jpcert | Vendor: Cybozu, Inc. | Product: Cybozu Office
Status : PUBLISHED

---

CVE-2019-6023 Description

Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to bypass access restriction which may result in obtaining data without access privileges via the application \'Address\'.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Fails to restrict access
Source: Cybozu, Inc.

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).