Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-26054PUBLISHED: 2022-07-04Operation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Link.
CVE-2022-26368PUBLISHED: 2022-07-04Browse restriction bypass and operation restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter and/or obtain the data of Cabinet.
CVE-2022-27627PUBLISHED: 2022-07-04Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2 to 5.5.1 allows a remote attacker to execute an arbitrary script on the logged-in user's web browser.
CVE-2022-27661PUBLISHED: 2022-07-04Operation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Workflow.
CVE-2022-27803PUBLISHED: 2022-07-04Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Space.
User Rank: Apprentice
5/25/2017 | 3:54:15 PM
Patching yes is key, but the most important is still Security awarness. How did this worm get in? It was via unwarry email users opening emails and fillowing links or activating attachments that is the entry point of this vulnerability.
The problem is we in the community tend to close the barn door after the horse has run through the house.
We do not need to depend on more tech solutions (Patching exempt).
Time to start serious end user education and start to close down the weekest link.