Cybozu Garoon 4.0.0 to 4.6.3 allows authenticated malicious users to alter the information with privileges invoking the installer via unspecified vectors.
cybozu garoon