{"id":"CVE-2021-20625","aliases":["EUVD-2021-8043","GHSA-p279-63m3-gp38"],"status":"published","title":"Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows...","description":"Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Bulletin Board via unspecified vectors.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00673,"percentile":0.52617,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-863"],"published":"2021-03-18T00:55:57Z","modified":"2026-06-17T03:34:08Z","products":[{"vendor":"cybozu","product":"office"},{"vendor":"cybozu, inc.","product":"cybozu office"}],"references":[{"url":"https://jvn.jp/en/jp/JVN45797538/index.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://kb.cybozu.support/article/36874/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20625"},{"url":"https://github.com/advisories/GHSA-p279-63m3-gp38"}],"sources":{"cve":[{"id":"CVE-2021-20625","description":"Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Bulletin Board via unspecified vectors.","status":"published","published":"2021-03-18T00:55:57Z","modified":"2024-08-03T17:45:44.832Z","updated_at":"2026-11-02T14:32:55.564736Z"}],"euvd":[{"id":"EUVD-2021-8043","description":"Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Bulletin Board via unspecified vectors.","status":"published","published":"2021-03-18T00:55:57Z","modified":"2024-08-03T17:45:44Z","updated_at":"2026-11-03T03:25:08.888273Z"}],"ghsa":[{"id":"GHSA-p279-63m3-gp38","title":"Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows...","description":"Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Bulletin Board via unspecified vectors.","status":"published","published":"2022-05-24T17:44:43Z","modified":"2023-01-27T05:02:43Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:42:05.930236Z"}],"nvd":[{"id":"CVE-2021-20625","description":"Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Bulletin Board via unspecified vectors.","status":"published","published":"2021-03-18T01:15:11.593Z","modified":"2026-06-17T03:34:08.62Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:50.805771Z"}]}}