Cybozu Office Authentication Bypass Vulnerability (Windows)

  1. Network Vulnerabilities
  2. General
  3. Cybozu Office Authentication Bypass Vulnerability (Windows)
Summary
This host is installed with Cybozu Office and is prone to authentication bypass vulnerability.
Impact
Successful exploitation will allow remote attackers to bypass authentication and obtain or modify sensitive information by using the unique ID of the 'user&qts' cell phone. Impact Level: Application.
Solution
Upgrade to Cybozu Office 8 (8.1.0.1). For updates refer to http://products.cybozu.co.jp/office
Insight
The flaw exists due to insufficient checks being performed when accessing the 'login' interface.
Affected
Cybozu Office before 8 (8.1.0.1).
References
Updated on 2015-03-25
Severity
Medium Severity
Classification
Related Vulnerabilities