Vulnerabilities > CVE-2015-8483 - Open Redirection vulnerability in Cybozu Office

CVSS 5.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

NONE

network

cybozu

NVD

Published: 2016-02-17

Updated: 2016-02-22

Summary

Open redirect vulnerability in Cybozu Office 10.2.0 through 10.3.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL. <a href="http://cwe.mitre.org/data/definitions/601.html">CWE-601: URL Redirection to Untrusted Site ('Open Redirect')</a>

Vulnerable Configurations

Part	Description	Count
Application	Cybozu Cybozu Office 9.0 Cybozu Office 9.1.0 Cybozu Office 9.2.0 Cybozu Office 9.2.1 Cybozu Office 9.3.0 Cybozu Office 9.3.1 Cybozu Office 9.3.2 Cybozu Office 9.9.0 Cybozu Office 10.0.0 Cybozu Office 10.0.1 Cybozu Office 10.0.2 Cybozu Office 10.1.0 Cybozu Office 10.1.2 Cybozu Office 10.2.0 Cybozu Office 10.3.0	15

Summary

Vulnerable Configurations

References