Security Advisory
CVE-2019-5935
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the Item function of User Information.