Directory Traversal Vulnerability in Cybozu Remote Service by Cybozu
CVE-2018-16171

8.8HIGH

Key Information:

Vendor

Cybozu
Status
Cybozu Remote Service
Vendor
CVE Published:
9 January 2019

What is CVE-2018-16171?

A directory traversal vulnerability in Cybozu Remote Service versions 3.0.0 to 3.1.8 permits remote attackers to gain unauthorized access to the server's file system. By exploiting this vulnerability, attackers can execute arbitrary Java code, potentially compromising the integrity and confidentiality of sensitive data. This security flaw arises from unspecified vectors that allow control over the file paths used in the server's processing. It is crucial for users of affected versions to apply necessary patches or upgrades to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Cybozu Remote Service 3.0.0 to 3.1.8

References

https://kb.cybozu.support/article/35259/
x_refsource_MISC
https://jvn.jp/en/jp/JVN23161885/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.