CVE-2013-2308: The (1) OWA Helper and (2) OSG Lite programs in SoftBank Online Service Gate allow remote authenticated use...

Security readout for executives and security teams

This issue concerns SoftBank Online Service Gate components that could let an authenticated user see their own password, which may undermine an Office 365 restriction. The public record does not provide severity scoring, affected versions, or attack details. Treat it as relevant mainly where this legacy SoftBank service remains in use. Exposure appears limited to organizations using SoftBank Online Service Gate with OWA Helper or OSG Lite enabled. The attacker must already be authenticated. The affected version range is not stated in the source bundle. Prioritize assessment if your organization still uses SoftBank Online Service Gate. The issue is old and authenticated-only, but password disclosure can weaken identity controls and compliance assumptions. If the service is not deployed, no action is indicated beyond documenting non-exposure. Mitigation focus: Inventory SoftBank Online Service Gate deployments and confirm whether OWA Helper or OSG Lite is enabled.; Check SoftBank and JVN guidance for supported updates, workarounds, or retirement recommendations.; Restrict access to these components to required users and trusted networks where possible..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.