CVE Vulnerabilities

CVE-2024-39817

Published: Aug 06, 2024 | Modified: Sep 11, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting search under certain conditions in Custom App.

Affected Software

Name Vendor Start Version End Version
Office Cybozu 10.0.0 (including) 10.8.7 (excluding)

References