CVEvulnerability
CVE-2021-20624
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-03-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Description
Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Scheduler via unspecified vectors.
Affected configurations
• cybozu office (>= 10.0.0 <= 10.8.4)
References
- https://jvn.jp/en/jp/JVN45797538/index.html Third Party Advisory
- https://kb.cybozu.support/article/36866/ Vendor Advisory
- https://jvn.jp/en/jp/JVN45797538/index.html Third Party Advisory
- https://kb.cybozu.support/article/36866/ Vendor Advisory