CVE-2019-5935

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the Item function of User Information...

CVE-2019-5935

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the Item function of User Information...

CVE-2019-5935

CVE-2019-5935 concerns Cybozu Garoon 4.0.0 to 4.10.1, where remote authenticated attackers could bypass access control and change user information without privileges via the Item function of User Information. The issue’s impact is that a user who can log in may alter user data without proper auth...