description: Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors.
problem types: Fails to restrict access
affected:
{
product: Cybozu Garoon
vendor: Cybozu, Inc.
versions:
status: affected, version: 3.0.0 to 4.2.3
}