CVEvulnerability
CVE-2010-2029
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-05-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
Cybozu Office 7 Ktai and Dotsales do not properly restrict access to the login page, which allows remote attackers to bypass authentication and obtain or modify sensitive information by using the unique ID of the user's cell phone.
Affected configurations
• cybozu cybozu office 7
• cybozu cybozu dotsales
Related
Weakness · not in database (1)
References
- http://cybozu.co.jp/products/dl/notice/detail/0034.html cybozu.co.jp
- http://jvn.jp/en/jp/JVN87730223/index.html jvn.jp
- http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000016.html jvndb.jvn.jp
- http://secunia.com/advisories/39508 Vendor Advisory
- http://www.ipa.go.jp/security/english/vuln/201004_cybozu_en.html www.ipa.go.jp
- http://www.osvdb.org/63933 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57976 exchange.xforce.ibmcloud.com
- http://cybozu.co.jp/products/dl/notice/detail/0034.html cybozu.co.jp
- http://jvn.jp/en/jp/JVN87730223/index.html jvn.jp
- http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000016.html jvndb.jvn.jp
- http://secunia.com/advisories/39508 Vendor Advisory
- http://www.ipa.go.jp/security/english/vuln/201004_cybozu_en.html www.ipa.go.jp
- http://www.osvdb.org/63933 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57976 exchange.xforce.ibmcloud.com