CVE-2024-31404 | THREATINT

Assigner	jpcert
Reserved	2024-04-03
Published	2024-06-11
Updated	2024-08-02

Description

Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.5.0 to 6.0.0, which may allow a user who can log in to the product to view the data of Scheduler.

Problem types

Insertion of Sensitive Information Into Sent Data

Product status

5.5.0 to 6.0.0

affected

References

https://cs.cybozu.co.jp/2024/007901.html

https://jvn.jp/en/jp/JVN28869536/

cve.org CVE-2024-31404

nvd.nist.gov CVE-2024-31404

Download JSON

https://cve.threatint.com

Subscribe to our newsletter to learn more about our work.