CVE-2018-16172

—

CVSS 3.0

6.5 medium

EPSS

<1%p47

Published

Jan 9, 2019 (Jan 9, 2019)

Modified

Jun 17, 2026

Description

Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 to 3.1.8, that allows remote attackers to trick a user to delete the registered client certificate.

Vendors: cybozu
Products: remote service manager
Weakness: CWE-1021
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.