The CGI component in Cybozu Garoon 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unspecified vectors.
References
Link | Resource |
---|---|
http://jvn.jp/en/jp/JVN42024228/index.html | Vendor Advisory |
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000073 | Vendor Advisory |
http://cs.cybozu.co.jp/information/gr20140421news01.php | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2014-07-20 04:12
Updated : 2014-08-04 12:00
NVD link : CVE-2014-1987
Mitre link : CVE-2014-1987
JSON object : View
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Products Affected
cybozu
- garoon