Cybozu Garoon Operational Restriction Bypass Vulnerability (CNVD-2022-53803)

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. The system provides portal, E-mail, bookmarks, scheduling, bulletin board, document management, etc. Cybozu Garoon is vulnerable to an operational restriction bypass vulnerability that originates from improper privilege management in Bulletin, which can be exploited to change the data in the bulletin.