description: Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the Report without access privileges via the application 'Multi Report'.
problem types: Fails to restrict access
affected:
{
product: Cybozu Garoon
vendor: Cybozu, Inc.
versions:
status: affected, version: 4.0.0 to 4.10.1
}