CVE-2021-20757

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.0.2

Description: The issue allows a remote authenticated attacker to bypass operational restrictions and alter Portal data without the appropriate privilege. This is related to an operational restrictions bypass vulnerability in the E-mail component of Cybozu Garoon.

Recommendations: For Cybozu Garoon versions 4.0.0 through 5.0.2, update to a version that contains a fix for this issue to prevent unauthorized data alterations. At the moment, there is no information about a newer version that contains a fix for this vulnerability.