Directory Traversal Vulnerability in Cybozu Dezie by Cybozu
CVE-2018-0705

9.1CRITICAL

Key Information:

Vendor

Cybozu
Status
Cybozu Dezie
Vendor
CVE Published:
9 January 2019

What is CVE-2018-0705?

A directory traversal vulnerability in Cybozu Dezie versions 8.0.2 to 8.1.2 permits remote attackers to exploit this flaw by crafting specific HTTP requests, enabling them to access arbitrary files on the server. This vulnerability poses a significant risk, potentially allowing unauthorized data exposure, as attackers can traverse the file system and read sensitive information.

Affected Version(s)

Cybozu Dezie 8.0.2 to 8.1.2

References

https://jvn.jp/en/jp/JVN16697622/index.html
third-party-advisoryx_refsource_JVN
https://kb.cybozu.support/article/34089/
x_refsource_MISC

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.