Cross site request forgery (csrf)

Cybozu Garoon 3.5 through 3.7 SP2 allows remote attackers to bypass Keitai authentication via a modified user ID in a request...

CVE-2013-6006

Cybozu Garoon Keitai authentication bypass (CVE-2013-6006) is documented for Cybozu Garoon 3.5–3.7 SP2. A remote attacker can bypass Keitai authentication by sending a request with a modified user ID, potentially exposing information accessible to that user. Public sources (JVN/JVNDB/Seebug, NVD)...

CVE-2013-6006

Cybozu Garoon 3.5 through 3.7 SP2 allows remote attackers to bypass Keitai authentication via a modified user ID in a request...

CVE-2013-6006: Improper Authentication

Cybozu Garoon 3.5 through 3.7 SP2 allows remote attackers to bypass Keitai authentication via a modified user ID in a request...

PT-2013-5917

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.5 through 3.7 SP2 Description The issue allows remote attackers to bypass Keitai authentication. This is achieved by modifying the user ID in a request. Recommendations For versions 3.5 through 3.7 SP2, consider...