JVN#19491840: Cybozu Office session management vulnerability

Cybozu Office is a groupware. Cybozu Office contains a vulnerability in session management.

Impact

A third-party that obtains the URL for a login may impersonate a user and access the product. As a result information may be altered or disclosed.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

• Cybozu Office 9.1.0 and earlier