Description
Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed.
References
- 97715 vdb-entry
- JVNDB-2016-000191 third-party-advisory
- JVN#09736331 third-party-advisory
- https://support.cybozu.com/ja-jp/article/9428