Description
Cybozu Garoon 3.0.0 to 4.10.0 allows remote attackers to bypass access restriction to view information available only for a sign-on user via Single sign-on function.
References (2)
Core 2
Core References
Patch, Third Party Advisory third-party-advisory
x_refsource_jvn
https://jvn.jp/en/jp/JVN25385698/index.html
Vendor Advisory x_refsource_misc
https://kb.cybozu.support/article/35265
Scores
CVSS v3
7.5
EPSS
0.0023
EPSS Percentile
45.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
Status
published
Products (1)
cybozu/garoon
3.0.0 - 4.10.0
Published
Jan 09, 2019
Tracked Since
Feb 18, 2026