CVE-2014-1989

Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls...

CVE-2014-1989

Cybozu Garoon vulnerability CVE-2014-1989: Cybozu Garoon versions 3.0–3.7 SP3 contain an API access restriction bypass that allows users who can log in to delete schedule information they are not permitted to edit. Root cause described as an API access restriction bypass; impact is remote authent...