Description
Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time card and attendance) via unspecified vectors related to manipulation of a URL.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://osvdb.org/76124 ↗
- http://cs.cybozu.co.jp/information/20111005notice01.php ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70411 ↗
- http://jvn.jp/en/jp/JVN84838479/index.html ↗
- http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000079.html ↗
- http://www.securityfocus.com/bid/50015 ↗
- http://secunia.com/advisories/46321 ↗