Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time card and attendance) via unspecified vectors related to manipulation of a URL.
| Software | From | Fixed in |
|---|---|---|
| cybozu / office | - | 7.x |
| cybozu / office | 6 | 6.x |