Cybozu Garoon 3.0.0 to 4.10.0 allows remote malicious users to bypass access restriction to view information available only for a sign-on user via Single sign-on function.
cybozu garoon