Description
The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended access restrictions via unspecified vectors.
References
- http://cs.cybozu.co.jp/information/gr20140714up04.php
- JVNDB-2014-000077 third-party-advisory
- JVN#75990997 third-party-advisory