Bypassing Access Restrictions in Cybozu Garoon's Cabinet Multiple Files Download Function

CVE-2019-5942 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:N/A:N

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to obtain files without access privileges via the Multiple Files Download function of application 'Cabinet'.

Learn more about our Web Application Penetration Testing UK.