CVE-2016-4910

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.2

Description The issue allows remote authenticated attackers to bypass access restrictions, enabling them to delete other operational administrators' MultiReport filters.

Recommendations For versions 3.0.0 through 4.2.2, consider restricting access to the MultiReport filter management functionality until a patch is available. As a temporary workaround, limit the privileges of operational administrators to prevent unauthorized deletion of MultiReport filters.