CVE-2016-7801: Improper Access Control

Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to bypass access restrictions to delete other users' To-Dos via unspecified vectors...

PT-2017-9352

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.2 Description The issue allows remote attackers to bypass access restrictions, enabling them to delete other users' To-Dos. The exact vectors used for this bypass are not specified. Recommendations For...

Cybozu Garoon fails to restrict access permission in To-Dos of Space function

Overview Cybozu Garoon provided by Cybozu,Inc. is a groupware. Cybozu Garoon contains an access restriction flaw in To-Dos of Space function. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated under the...