CVE-2017-2165

GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors.

Date published : 2017-06-09

http://www.securityfocus.com/bid/98719

http://jvn.jp/en/jp/JVN42164352/index.html