CVE-2018-16172: Medium severity cybozu remote service manager vulnerability
Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 to 3.1.8, that allows remote attackers to trick a user to delete the registered client certificate.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-16172.
What is the severity rating of CVE-2018-16172?
CVE-2018-16172 has a severity rating of 6.5 (medium).
What is the affected software for CVE-2018-16172?
The affected software for CVE-2018-16172 is Cybozu Remote Service Manager versions 3.0.0 to 3.1.8.
What is the description of CVE-2018-16172?
CVE-2018-16172 is an improper countermeasure against clickjacking attack in the client certificates management screen in Cybozu Remote Service, allowing remote attackers to trick a user into deleting the registered client certificate.
How can I fix CVE-2018-16172?
Unfortunately, there is no known fix or patch for CVE-2018-16172 at the moment. It is recommended to follow the suggestions provided by the vendor or refer to the references for more information.