Login Request a demo
Unscored severity · published Oct 21, 2011
CVE-2011-2677
Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time card and attendance) via unspecified…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time card and attendance) via unspecified vectors related to manipulation of a URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Cybozu
through 7; 6 · source: NVD
Affected product
OF
Office
Cybozu
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2677
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2677
cs.cybozu.co.jp
http://cs.cybozu.co.jp/information/20111005notice01.php
jvn.jp
http://jvn.jp/en/jp/JVN84838479/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000079.html
osvdb.org
http://osvdb.org/76124
Vendor Advisory
http://secunia.com/advisories/46321
www.securityfocus.com
http://www.securityfocus.com/bid/50015
More from Office
8.8
CVE-2016-1151
Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication of arbitrary users
7.5
CVE-2018-0704
Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via Keitai Screen
7.5
CVE-2018-0703
Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via HTTP requests
7.4
CVE-2015-8483
Open redirect vulnerability in Cybozu Office 10.2.0 through 10.3.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL
6.5
CVE-2024-39817
Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user…