Access Restriction Bypass in Cybozu Garoon 3.0.0 to 4.2.3

Access Restriction Bypass in Cybozu Garoon 3.0.0 to 4.2.3

CVE-2017-2094 · MEDIUM Severity

AV:N/AC:L/AU:S/C:N/I:P/A:N

Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors.

Learn more about our Web Application Penetration Testing UK.