« Volver al listado

CVE-2013-2308

Estado: ModificadaMedia (4)—

El (1) OWA Helper y (2)programas OSG Lite en SoftBank Online Service Gate permite a usuarios autenticados remotos descubrir su propia contraseña, por lo que se burla la restricción de Office 365, a través de vectores desconocidos.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Softbanktech — Online Service Gate

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-2308",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": true,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-05-09T12:31:19.833",
  "references": [
    {
      "url": "http://jvn.jp/en/jp/JVN61972596/index.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000035",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://www.softbanktech.jp/news/20121029.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvn.jp/en/jp/JVN61972596/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000035",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.softbanktech.jp/news/20121029.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The (1) OWA Helper and (2) OSG Lite programs in SoftBank Online Service Gate allow remote authenticated users to discover their own passwords, and consequently bypass an Office 365 restriction, via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "El (1) OWA Helper y (2)programas OSG Lite en SoftBank Online Service Gate permite a usuarios autenticados remotos descubrir su propia contraseña, por lo que se burla la restricción de Office 365, a través de vectores desconocidos."
    }
  ],
  "lastModified": "2026-06-16T23:53:06.643",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:softbanktech:online_service_gate:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E7CAE2E8-4707-4C3B-9680-315ACC651652"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp"
}