CVE-2021-20806
First published: Wed Oct 13 2021(Updated: )
Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cybozu Remote Service Manager | >=3.0.0<=3.1.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-20806?
CVE-2021-20806 is an open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 that allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks.
How severe is CVE-2021-20806?
CVE-2021-20806 has a severity rating of 6.1 out of 10, which is considered medium.
Which software versions are affected by CVE-2021-20806?
Cybozu Remote Service versions 3.0.0 to 3.1.9 are affected by CVE-2021-20806.
How can remote attackers exploit CVE-2021-20806?
Remote attackers can exploit CVE-2021-20806 by tricking users into visiting a malicious website disguised as a legitimate website and conducting phishing attacks.
Is there a fix available for CVE-2021-20806?
Yes, Cybozu has provided a fix for CVE-2021-20806. It is recommended to update to a patched version of Cybozu Remote Service.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/type
- agent/tags
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/cybozu
- canonical/cybozu remote service manager
- version/cybozu remote service manager/3.0.0
- version/cybozu remote service manager/3.1.9