Cybozu Garoon Operational Restriction Bypass Vulnerability (CNVD-2022-54299)

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. The system provides Portal, E-mail, Bookmarks, Scheduler, Bulletin Board, Document Management, etc. An operational restriction bypass vulnerability exists in Cybozu Garoon, which stems from improper privilege management in Portal and can be exploited to change Portal data.