EUVD-2014-2041

Malware in sbrugna...

CVE-2014-1989

Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls...

Design/Logic Flaw

Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls...

CVE-2014-1989: Undefined Security Weakness

Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls...

PT-2014-4410

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0 through 3.7 SP3 Description The issue allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls. Recommendations For versions 3.0 through 3.7...

JVN#31230946: Cybozu Garoon API access restriction bypass vulnerability

Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains an access restriction bypass vulnerability when using APIs. Impact Users who can log in to the system may delete schedule information that they do not have permission to edit. Solution Update the Software Update to the...