CVE-2018-16178

Cybozu Garoon versions 3.0.0–4.10.0 contain an authentication restriction bypass via the Single Sign-On function (CWE-284). An attacker who can access the product may bypass authentication and view information intended for signed-on users. The issue was addressed in Cybozu Garoon 4.10.1; updating...