description: GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors.
problem types: Fails to restrict access
affected:
{
product: GroupSession
vendor: Japan Total System Co.,Ltd.
versions:
status: affected, version: versions 4.6.4 and earlier
}