NVD

Id
13520  
Name
CVE-2010-2029  
Description
Cybozu Office 7 Ktai and Dotsales do not properly restrict access to the login page, which allows remote attackers to bypass authentication and obtain or modify sensitive information by using the unique ID of the user"s cell phone.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-05-24  
Modified Date
2010-05-26  
Seq
2010-2029  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
74643 13520 CVE-2010-2029 http://cybozu.co.jp/products/dl/notice/detail/0034.html  View
74644 13520 CVE-2010-2029 JVN#87730223  View
74645 13520 CVE-2010-2029 JVNDB-2010-000016  View
74646 13520 CVE-2010-2029 http://www.ipa.go.jp/security/english/vuln/201004_cybozu_en.html  View
74647 13520 CVE-2010-2029 cybozu-office-dotsales-sec-bypass(57976)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35171 JVNDB-2010-000016 複数のサイボウズ製品におけるアクセス制限に関する脆弱性 複数のサイボウズ製品には、アクセス制限が不十分な脆弱性が存在します。 CVE-2010-2029 44609 CVE-2010-2029 13520 5.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000016.html 2010-04-20 2010-04-20 View