CVE-2019-5941

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the Report without access privileges via the application 'Multi Report'...

CVE-2019-5941

CVE-2019-5941 affects Cybozu Garoon 4.0.0 to 4.10.1. A privilege/access-control flaw in the Multi Report functionality allows remote authenticated attackers to bypass access restrictions and alter the Report without proper access privileges. Impact is the unauthorized modification of reports for ...