Directory Traversal Vulnerability in Cybozu Remote Service for Windows
CVE-2018-16170

8.1HIGH

Key Information:

Vendor

Cybozu
Status
Cybozu Remote Service
Vendor
CVE Published:
9 January 2019

What is CVE-2018-16170?

A directory traversal vulnerability exists in Cybozu Remote Service versions 3.0.0 through 3.1.8 for Windows. This vulnerability allows remote authenticated attackers to gain access to arbitrary files on the affected system, potentially exposing sensitive information. The exploit occurs through unspecified vectors, highlighting the need for subscribers to secure their installations and apply best practices to safeguard against unauthorized file access.

Affected Version(s)

Cybozu Remote Service 3.0.0 to 3.1.8 for Windows

References

https://kb.cybozu.support/article/34301/
x_refsource_MISC
https://jvn.jp/en/jp/JVN23161885/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.