Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2013-2308
cve
2013
2308
softbank
online service gate
owa helper
osg lite
remote authentication
password discovery
office 365
restriction bypass
nvd
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
55.7%
The (1) OWA Helper and (2) OSG Lite programs in SoftBank Online Service Gate allow remote authenticated users to discover their own passwords, and consequently bypass an Office 365 restriction, via unspecified vectors.
Affected configurations
Node
softbanktechonline_service_gateMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| softbanktech:online_service_gate | softbanktech online service gate | eq | - |
Related
nvd
nvd
CVE-2013-2308
2013-05-09 12:31:19
prion
prion
Design/Logic Flaw
2013-05-09 12:31:00
jvn
jvn
cvelist
cvelist
CVE-2013-2308
2022-10-03 16:15:02
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
55.7%
Related for CVE-2013-2308