Cybozu Garoon 4.2.4 to 4.10.1 allow remote malicious users to obtain the users' credential information via the authentication of Cybozu Garoon.
cybozu garoon