CVE-2010-2029

Cybozu Office 7 Ktai and Dotsales do not properly restrict access to the login page, which allows remote attackers to bypass authentication and obtain or modify sensitive information by using the unique ID of the user's cell phone.

Score
CVSS 2.0 5.8 Medium
Status
Modified - cve@mitre.org
Published
2010-05-24
Last modified
2024-08-07
Weaknesses
CWE-264

Affected products

References

 
 
© AVABIS GmbH privacypolicy about