Description (CNA)
Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cybozu, Inc. / Cybozu Office | affected 10.0.0 to 10.8.6 |
CWE
No CWE identifiers supplied.
References
- https://jvn.jp/en/jp/JVN29845579/
- https://kb.cybozu.support/?product=office&v=&fv=10.8.7&t=%E8%84%86%E5%BC%B1%E6%80%A7&s=
ADP enrichment
No English description supplied.
No references supplied.