Cybozu Garoon Licensing Issue Vulnerability (CNVD-2022-54300)

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. The system provides portal, E-mail, bookmark, scheduler, bulletin board, document management, etc. An authorization issue vulnerability exists in Cybozu Garoon, which stems from an error in the Scheduler when processing authentication requests. An attacker could use this vulnerability to bypass the authentication process and obtain some data for facility information.