Description (CNA)
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cybozu, Inc. / Cybozu Garoon | affected 3.0.0 to 4.2.3 |
CWE
No CWE identifiers supplied.
References
- https://support.cybozu.com/ja-jp/article/9655
- http://jvn.jp/en/jp/JVN73182875/index.html
- http://www.securityfocus.com/bid/96429
ADP enrichment
No English description supplied.