JVN#25765762: Cybozu Garoon vulnerable to information disclosure

Cybozu Garoon is a groupware. Cybozu Garoon contains an information disclosure vulnerability in the mail function.

Impact

By sending a specially crafted email, an attacker may be convinced that the user read the email.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• Cybozu Garoon 3.7 to 4.2