Cybozu Garoon is a portal-based OA office system from Cybozu Japan. The system provides portal, E-mail, bookmark, scheduler, bulletin board, document management, etc. An authorization issue vulnerability exists in Cybozu Garoon, which stems from improper privilege management in Cabinet, and can be exploited to change and/or obtain data from Cabinet.