Cybozu Garoon 3.5.0 to 4.6.1 allows remote authenticated malicious users to bypass access restriction to view the closed title of "Cabinet" via unspecified vectors.
cybozu garoon