description: Cybozu Garoon 4.0.0 to 4.10.0 allows remote authenticated attackers to bypass access restriction to view the Bulletin Board without view privileges via the application 'Bulletin'.
problem types: Fails to restrict access
affected:
{
product: Cybozu Garoon
vendor: Cybozu, Inc.
versions:
status: affected, version: 4.0.0 to 4.10.0
}