CVE-2021-20630

EUVD-2021-8048 · Published Mar 18, 2021

Improper access control vulnerability in Phone Messages of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Phone Messages via unspecified vectors.

Technologies

Cybozu Office

Weaknesses

NVD-CWE-Other

CVSS scores

v3.14.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
v2.04.0AV:N/AC:L/Au:S/C:P/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://jvn.jp/en/jp/JVN45797538/index.html
https://kb.cybozu.support/article/36872/

Potentially impacted assets

See if this affects your attack surface