CVE-2021-20630

2021-03-1800:56:00

jpcert

www.cve.org

access control

cybozu office

phone messages

data obtain

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

Improper access control vulnerability in Phone Messages of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Phone Messages via unspecified vectors.

CNA Affected

[
  {
    "product": "Cybozu Office",
    "vendor": "Cybozu, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0 to 10.8.4"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN45797538/index.html

kb.cybozu.support/article/36872/