CVE-2013-2308

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-05-09 · updated 2026-06-16
Weakness: CWE-200

Description

The (1) OWA Helper and (2) OSG Lite programs in SoftBank Online Service Gate allow remote authenticated users to discover their own passwords, and consequently bypass an Office 365 restriction, via unspecified vectors.

Affected products

Softbanktech Online Service Gate: all versions

References

http://jvn.jp/en/jp/JVN61972596/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000035
https://www.softbanktech.jp/news/20121029.html
http://jvn.jp/en/jp/JVN61972596/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000035
https://www.softbanktech.jp/news/20121029.html

Get alerted when CVE-2013-2308 or the next vulnerability affects your stack