CVE-2010-2029

EUVD-2010-2049
Cybozu Office 7 Ktai and Dotsales do not properly restrict access to the login page, which allows remote attackers to bypass authentication and obtain or modify sensitive information by using the unique ID of the user's cell phone.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
Affected Products (NVD)
VendorProductVersion
cybozucybozu_dotsales
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://cybozu.co.jp/products/dl/notice/detail/0034.html
http://jvn.jp/en/jp/JVN87730223/index.html
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000016.html
http://secunia.com/advisories/39508
http://www.ipa.go.jp/security/english/vuln/201004_cybozu_en.html
http://www.osvdb.org/63933
https://exchange.xforce.ibmcloud.com/vulnerabilities/57976
http://cybozu.co.jp/products/dl/notice/detail/0034.html
http://jvn.jp/en/jp/JVN87730223/index.html
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000016.html
http://secunia.com/advisories/39508
http://www.ipa.go.jp/security/english/vuln/201004_cybozu_en.html
http://www.osvdb.org/63933
https://exchange.xforce.ibmcloud.com/vulnerabilities/57976