CVE-2021-20806: Medium severity cybozu remote service manager vulnerability
Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-20806?
CVE-2021-20806 is an open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 that allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks.
How severe is CVE-2021-20806?
CVE-2021-20806 has a severity rating of 6.1 out of 10, which is considered medium.
Which software versions are affected by CVE-2021-20806?
Cybozu Remote Service versions 3.0.0 to 3.1.9 are affected by CVE-2021-20806.
How can remote attackers exploit CVE-2021-20806?
Remote attackers can exploit CVE-2021-20806 by tricking users into visiting a malicious website disguised as a legitimate website and conducting phishing attacks.
Is there a fix available for CVE-2021-20806?
Yes, Cybozu has provided a fix for CVE-2021-20806. It is recommended to update to a patched version of Cybozu Remote Service.