Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to obtain "customapp" information via unspecified vectors.
https://support.cybozu.com/ja-jp/article/9737
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-11298