Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to obtain files without access privileges via the Multiple Files Download function of application 'Cabinet'.
| Software | From | Fixed in |
|---|---|---|
| cybozu / garoon | 4.0.0 | 4.10.1.x |