CVE-2016-1196

Cybozu Garoon 3.x and 4.x before 4.2.1 are affected by CVE-2016-1196. The issue allows remote authenticated users to bypass access restrictions and retrieve sensitive Address Book information via an API call. According to the provided data, exploitation details are not described beyond the authen...