Description
Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 to 3.1.8, that allows remote attackers to trick a user to delete the registered client certificate.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cybozu | Cybozu Remote Service | 3.0.0 to 3.1.8 | — |
References
- https://kb.cybozu.support/article/35260/
- JVN#23161885 third-party-advisory