Operation Restriction Bypass in Cybozu Garoon Platform
CVE-2022-30602

8.1HIGH

Key Information:

Vendor

Cybozu
Status
Cybozu Garoon
Vendor
CVE Published:
11 July 2022

What is CVE-2022-30602?

An operation restriction bypass vulnerability exists in Cybozu Garoon versions 4.0.0 to 5.9.1, allowing remote authenticated attackers the ability to modify file information and even delete files. This vulnerability exposes applications built on the Cybozu Garoon platform to potential unauthorized actions, which could compromise the integrity of the data and disrupt normal operations.

Affected Version(s)

Cybozu Garoon 4.0.0 to 5.9.1

References

https://cs.cybozu.co.jp/2022/007682.html
x_refsource_MISC
https://jvn.jp/en/jp/JVN14077132/index.html
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.