CVE-2012-3822 Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials.
HighCVSS 7.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arialsoftware campaign enterprise | < 11.0.551 | 11.0.551 |
References
- sadgeeksinsnow.blogspot.dk exploit third-party-advisory
- 79509 third-party-advisory vdb-entry