CVE:CVE-2010-2029
CNNVD:CNNVD-201005-335
Cybozu Office是基于WEB的跨平台办公解决方案。
Cybozu Office 7 Ktai 和 Dotsales 没有适当限制对登录页面的访问，远程攻击者可利用用户手机的唯一ID号码绕开认证，获取或修改敏感信息。
solution:Upgrade cybozu cybozu_office to a higher version than 7,and avoid the version 7; Upgrade cybozu cybozu_dotsales to a higher version than *