Description
Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time card and attendance) via unspecified vectors related to manipulation of a URL.
References
- 76124 vdb-entry
- http://cs.cybozu.co.jp/information/20111005notice01.php
- cybozuoffice-unspecified-security-bypass(70411) vdb-entry
- JVN#84838479 third-party-advisory
- JVNDB-2011-000079 third-party-advisory
- 50015 vdb-entry
- 46321 third-party-advisory