SB2020042709 - Multiple vulnerabilities in Cybozu Garoon

Description

This security bulletin contains information about 5 secuirty vulnerabilities.

1) Improper Authentication (CVE-ID: CVE-2020-5563)

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error in authentication process. A remote attacker with access to the API provided by the product can bypass authentication process and gain unauthorized access to sensitive information on the target systen.

2) Cross-site scripting (CVE-ID: CVE-2020-5564)

The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.

The vulnerability exists due to insufficient sanitization of user-supplied data in the application "E-mail". A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.

3) Input validation error (CVE-ID: CVE-2020-5565)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to insufficient validation of user-supplied input in the applications "Workflow" and "MultiReport". A remote authenticated attacker can pass specially crafted input to the application and alter applications' data.

4) Improper Authorization (CVE-ID: CVE-2020-5566)

The vulnerability allows a remote attacker to bypass authorization checks.

The vulnerability exists due to missing authorization checks in the applications "E-mail" and "Messages". A remote authenticated attacker can alter applications' data.

Note: This vulnerability affects the applications "E-mail" and "Messages" in versions 4.0.0 to 4.0.2, and "Messages" in versions 4.0.3 to 4.10.3.

5) Improper Authentication (CVE-ID: CVE-2020-5567)

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error in Application Menu. A remote attacker can bypass authentication process and obtain data of Application Menu.

Remediation

Install update from vendor's website.

References

• https://jvn.jp/en/jp/JVN35649781/index.html
• https://kb.cybozu.support/article/36118/
• https://kb.cybozu.support/article/36116/
• https://kb.cybozu.support/article/36119/
• https://kb.cybozu.support/article/36113/
• https://kb.cybozu.support/article/36114/