PT-2013-4549 · Cybozu · Cybozu Office

Ooi Keita · Publicado 2013-07-18 · Atualizado 2017-11-29 · CVE-2013-3656

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cybozu Office versions 9.1.0 and earlier

Description The issue allows remote attackers to bypass authentication by leveraging knowledge of a login URL, due to improper session management.

Recommendations For Cybozu Office versions 9.1.0 and earlier, update to a version that properly manages sessions to prevent authentication bypass.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2013-3656

Produtos afetados

Cybozu Office

Referências · 5

• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000069 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85894 · Nota
• http://jvn.jp/en/jp/JVN19491840/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-3656 · Nota de Segurança
• http://products.cybozu.co.jp/office/ver9/download/update/fix910.html · Aviso do Fabricante