CVE-2016-1220

Cybozu Garoon before 4.2.2 does not properly restrict access...

CVE-2016-1220

CVE-2016-1220 affects Cybozu Garoon up to version 4.2.1 (before 4.2.2). The issue is an improper access restriction that can allow a user to obtain product settings information (access privilege bypass). Mitigation is to upgrade to version 4.2.2 or later (patched release).