Cybozu Garoon Unspecified Security Bypass Vulnerability

Bugtraq ID:	64639
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 29 2013 12:00AM
Updated:	Nov 29 2013 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	Cybozu Garoon 3.0 Cybozu Garoon 2.1.3 Cybozu Garoon 2.1.1 Cybozu Garoon 3.5.5 Cybozu Garoon 3.5.4 Cybozu Garoon 3.5.3 Cybozu Garoon 3.5.2 Cybozu Garoon 3.5 Cybozu Garoon 3.1.3 Cybozu Garoon 3.1.2 Cybozu Garoon 3.1.1 Cybozu Garoon 3.1 Cybozu Garoon 3.0.3 Cybozu Garoon 3.0.2 Cybozu Garoon 3.0.1 Cybozu Garoon 2.0.0
Not Vulnerable:	Cybozu Garoon 3.7.2

Cybozu Garoon Unspecified Security Bypass Vulnerability

ownCloud is prone to a remote security-bypass vulnerability.

Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions.

Cybozu Garoon Unspecified Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cybozu Garoon Unspecified Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cybozu Garoon Unspecified Security Bypass Vulnerability

References:

• 3.7 Service Pack 2 (Cybozu)
  
• Garoon Homepage (Cybozu)
  
• Rune of version 3.7.2 (Cybozu)