CVE-2016-4867

The “Project” function in Cybozu 9.0.0 through 10.4.0 allows remote authenticated users to read closed project information.