PT-2013-3652 · Microsoft+1 · Office 365+3

Publicado 2013-05-09 · Atualizado 2013-05-09 · CVE-2013-2308

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SoftBank Online Service Gate (affected versions not specified)

Description The issue in SoftBank Online Service Gate allows remote authenticated users to discover their own passwords and bypass an Office 365 restriction. This is possible through the OWA Helper and OSG Lite programs via unspecified vectors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-2308

Produtos afetados

Osg Lite

Owa Helper

Office 365

Softbank Online Service Gate

Referências · 4

• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000035 · Nota
• http://jvn.jp/en/jp/JVN61972596/index.html · Nota
• https://softbanktech.jp/news/20121029.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-2308 · Nota de Segurança