CVE-2017-10857

Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function.

• CWE-269

• http://jvn.jp/en/jp/JVN14658424/index.htmlThird Party Advisory, VDB Entry
• https://support.cybozu.com/ja-jp/article/9811Vendor Advisory
• http://jvn.jp/en/jp/JVN14658424/index.htmlThird Party Advisory, VDB Entry
• https://support.cybozu.com/ja-jp/article/9811Vendor Advisory

Published

Oct 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-10851Untrusted search path vulnerability in Installer for Content…
• CVE-2017-10852Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earli…
• CVE-2017-10853Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earli…
• CVE-2017-10854Corega CG-WGR1200 firmware 2.20 and earlier allows an attack…
• CVE-2017-10855Untrusted search path vulnerability in FENCE-Explorer for Wi…
• CVE-2017-10856SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to …
• CVE-2017-10858Untrusted search path vulnerability in "i-filter 6.0 install…
• CVE-2017-10859Untrusted search path vulnerability in "i-filter 6.0 install…
• CVE-2017-1086In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE…
• CVE-2017-10860Untrusted search path vulnerability in "i-filter 6.0 install…
• CVE-2017-10861Directory traversal vulnerability in QND Advance/Standard al…
• CVE-2017-10862jwt-scala 1.2.2 and earlier fails to verify token signatures…