CVE-2020-5580

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.0.0 through 5.0.1

Description The issue allows remote authenticated attackers to bypass access restrictions, enabling them to view and/or alter Single sign-on settings. This is achieved via unspecified vectors.

Recommendations For versions 4.0.0 through 5.0.1, consider restricting access to Single sign-on settings until a patch is available. As a temporary workaround, limit the ability to alter Single sign-on settings to minimize the risk of exploitation.