CVE-2010-2029: Cybozu Office 7 Ktai and Dotsales do not properly restrict access to the login page, which allows remote at...

Security readout for executives and security teams

This CVE describes an authentication bypass in Cybozu Office 7 Ktai and Dotsales. A remote attacker could use a user cell phone unique ID to reach the login flow and obtain or modify sensitive information. Severity and affected version details are not provided in the bundle. Exposure is most likely in legacy environments still running Cybozu Office 7 Ktai or Dotsales, especially where mobile login functionality is reachable from untrusted networks. The bundle does not provide exact versions, configuration requirements, or internet exposure data. Treat this as high priority if the named products are still in use. The business risk is unauthorized access to sensitive information, including possible modification, but urgency depends on whether legacy Cybozu mobile access remains deployed. Mitigation focus: Check Cybozu, JVN, and IPA guidance for the official fix or workaround.; Inventory Cybozu Office 7 Ktai and Dotsales deployments.; Restrict remote access to affected login pages while assessing exposure..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.