Cybozu Garoon 3.x < 4.2.1 Multiple Vulnerabilities

Cybozu Garoon is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon"; ifdescription...

CVE-2016-1190

CVE-2016-1190 affects Cybozu Garoon 3.x (3.1–4.2). The vulnerability is an access restriction bypass in the MultiReport function that enables remote authenticated users to view restricted reports. Root cause: bypass of access controls (vector unspecified in the Initial docs but described as a byp...