medium4.3
CVE-2016-1196
Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information v…
Impact
Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information via an API call, a different vulnerability than CVE-2015-7776.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cybozu | Garoon | Versions 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.1.0, 3.1.1 |