Cybozu Garoon Licensing Issue Vulnerability (CNVD-2022-54304)

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. The system provides portal, E-mail, bookmark, scheduler, bulletin board, document management, etc. Cybozu Garoon is vulnerable to an authorization issue that originates from improper privilege management in Workflow. An attacker can use this vulnerability to change the data in Workflow.