Access Restriction Bypass Vulnerability in Cybozu Garoon 4.0.0 to 4.10.1

CVE-2019-5935 · MEDIUM Severity

AV:N/AC:L/AU:S/C:N/I:P/A:N

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the Item function of User Information.

Learn more about our User Device Pen Test.