Unscored severity · published May 24, 2010
CVE-2010-2029
Cybozu Office 7 Ktai and Dotsales do not properly restrict access to the login page, which allows remote attackers to bypass authentication and obtain or modify sensitive…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Cybozu Office 7 Ktai and Dotsales do not properly restrict access to the login page, which allows remote attackers to bypass authentication and obtain or modify sensitive information by using the unique ID of the user's cell phone.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CD
Cybozu Dotsales · Cybozu
All versions, or not specified · source: NVD
CO
Cybozu Office · Cybozu
7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2029
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2029
cybozu.co.jp
http://cybozu.co.jp/products/dl/notice/detail/0034.html
jvn.jp
http://jvn.jp/en/jp/JVN87730223/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000016.html
Vendor Advisory
http://secunia.com/advisories/39508
www.ipa.go.jp
http://www.ipa.go.jp/security/english/vuln/201004_cybozu_en.html
www.osvdb.org
http://www.osvdb.org/63933