Description
Webservice-DIC yoyaku_v41 allows remote attackers to bypass authentication and complete a conference-room reservation via unspecified vectors, as demonstrated by an "unintentional reservation."
References
- JVNDB-2015-000108 third-party-advisory
- JVN#52248864 third-party-advisory