CVE-2016-1220by Jeremyin Security Bulletinson Posted on April 20, 2017 Cybozu Garoon before 4.2.2 does not properly restrict access.