CVE-2011-2677

Cybozu Office before 8.0.0 is affected by an improper access control vulnerability where remote authenticated users can bypass restrictions and access sensitive information (time card and attendance) by manipulating a URL. Affected product: Cybozu Office (pre-8.0.0). Root cause: insufficient enfo...