Cybozu Garoon 4.0.0 to 4.6.3 allows remote malicious users to bypass access restriction to browse unauthorized pages via the application 'Management of Basic System'.
cybozu garoon