PT-2013-4549 · Cybozu · Cybozu Office
CVSS v2.0
5.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Cybozu Office versions 9.1.0 and earlier
Description
The issue allows remote attackers to bypass authentication by leveraging knowledge of a login URL, due to improper session management.
Recommendations
For Cybozu Office versions 9.1.0 and earlier, update to a version that properly manages sessions to prevent authentication bypass.
Fix
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cybozu Office