CVE-2021-20803

Published: Oct 13, 2021Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Exploitability: 2.8 / Impact: 2.5

Source: NVD

Description

Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alter the data of the management screen.

Affected (2)

Products: Cybozu: Remote Service Manager

Cybozu

1 product

Remote Service Manager

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Cybozu Remote Service Manager	Version 3.1.8
Cybozu Remote Service Manager	Version 3.1.9

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (4)

https://jvn.jp/en/jp/JVN52694228/index.html

Source: vultures@jpcert.or.jp

Third Party Advisory

https://kb.cybozu.support/article/37421

Source: vultures@jpcert.or.jp

Vendor Advisory

https://jvn.jp/en/jp/JVN52694228/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://kb.cybozu.support/article/37421

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.