NetSight
medium4.3

CVE-2019-5935

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the I…

Impact

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the Item function of User Information.

Affected products

VendorProductAffected versions
CybozuGaroon
from 4.0.0 through 4.10.1

References