Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to conduct XML External Entity (XXE) attacks and obtain the information stored in the product via unspecified vectors. This issue occurs only when using Mozilla Firefox.
References
| Link | Resource |
|---|---|
| https://jvn.jp/en/jp/JVN52694228/index.html | Third Party Advisory |
| https://kb.cybozu.support/article/37423 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
19 Oct 2021, 19:19
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:cybozu:remote_service_manager:3.1.8:*:*:*:*:*:*:* cpe:2.3:a:cybozu:remote_service_manager:3.1.9:*:*:*:*:*:*:* |
|
| CWE | CWE-611 | |
| References | (MISC) https://jvn.jp/en/jp/JVN52694228/index.html - Third Party Advisory | |
| References | (MISC) https://kb.cybozu.support/article/37423 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 6.5 |
13 Oct 2021, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-10-13 09:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-20801
Mitre link : CVE-2021-20801
CVE.ORG link : CVE-2021-20801
JSON object : View
Products Affected
cybozu
- remote_service_manager
CWE
CWE-611
Improper Restriction of XML External Entity Reference