PT-2013-4549 · Cybozu · Cybozu Office

Ooi Keita · Published 2013-07-18 · Updated 2017-11-29 · CVE-2013-3656

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cybozu Office versions 9.1.0 and earlier

Description The issue allows remote attackers to bypass authentication by leveraging knowledge of a login URL, due to improper session management.

Recommendations For Cybozu Office versions 9.1.0 and earlier, update to a version that properly manages sessions to prevent authentication bypass.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2013-3656

Affected Products

Cybozu Office

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2013-3656 · Security Note
• http://products.cybozu.co.jp/office/ver9/download/update/fix910.html · Vendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000069 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85894 · Note
• http://jvn.jp/en/jp/JVN19491840/index.html · Note